a little good-natured snooping

2005-02-18 Thread Paul
Hi all,

 

A client I had quite some time ago asked me to password protect his site - a
request made after the site was already complete.  He didn't want to pay for
a proper solution, so I basically created some a static password
cookie-based system.  Now he says his former partner gained access to his
site without a password, though I think it's much more likely that his
partner just got ahold of a password.

 

I wonder if any of you would like to try to view this page - try to get past
the password challenge without knowing the legitimate passwords.  If you can
do it I'd like to know how you did it.  (Because it's a weaker-than-normal
scheme I don't doubt it's possible, but I'm resistant to his insistence that
a joe-shmoe could hack his way in.)

 

Anyway give it a spin if you're interested:  http://www.mcglogistics.biz
http://www.mcglogistics.biz/  

 

2 more things:  Firefox pukes on the site.  (standards shmandards, I used to
say.).  Also it's not any sensitive data at all - just brochureware he
decided he needed to control access to.  So I'm not at all worried about
handing over the keys to the kingdom by inviting your snooping.

 

TIA

 

paul

 



~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:195428
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: a little good-natured snooping

2005-02-18 Thread Bryan F. Hogan
The site goes in a refresh frenzy if cookies are disabled.

-Original Message-
From: Paul [mailto:[EMAIL PROTECTED] 
Sent: Friday, February 18, 2005 1:26 PM
To: CF-Talk
Subject: a little good-natured snooping

Hi all,

 

A client I had quite some time ago asked me to password protect his site - a
request made after the site was already complete.  He didn't want to pay for
a proper solution, so I basically created some a static password
cookie-based system.  Now he says his former partner gained access to his
site without a password, though I think it's much more likely that his
partner just got ahold of a password.

 

I wonder if any of you would like to try to view this page - try to get past
the password challenge without knowing the legitimate passwords.  If you can
do it I'd like to know how you did it.  (Because it's a weaker-than-normal
scheme I don't doubt it's possible, but I'm resistant to his insistence that
a joe-shmoe could hack his way in.)

 

Anyway give it a spin if you're interested:  http://www.mcglogistics.biz
http://www.mcglogistics.biz/  

 

2 more things:  Firefox pukes on the site.  (standards shmandards, I used to
say.).  Also it's not any sensitive data at all - just brochureware he
decided he needed to control access to.  So I'm not at all worried about
handing over the keys to the kingdom by inviting your snooping.

 

TIA

 

paul

 





~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:195432
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54