On Mon, 10 Mar 2003, Shachar Shemesh wrote: > I think I will have a case, unless he pulls some activex from the hat > that does authentication. I can still claim that the old site is around, > and that one hole is enough, but that will leave me with a poor case.
You mean there might be an activex something that is downloaded to the client does the authentication there and sends it back ? So now it fully trusts anything comming from the client ? If that is the case I am glad I am not their customer. Gabor ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]