Security howler
-
I visited a certain device manufacturer's web site to download a piece of software I needed. They require you to register with a user name and password and supply the usual information (email address, phone number, cat's dress size and so on). I ploughed through the form, filling in all the compulsory fields. On the way it asked for my state and zip (even though I started from the UK site); I felt like being accurate so I entered "Fed up" and "Closed". When I pressed "Submit" there was a delay and then a message box saying I couldn't register that user name because it was already registered. I was even more fed up so I cancelled the attempt to register. A few seconds later I got an email welcoming me to the "Resource Center" and supplying the user name and password (of the previously-registered user). :laugh:
Phil
The opinions expressed in this post are not necessarily those of the author, especially if you find them impolite, inaccurate or inflammatory.
-
I visited a certain device manufacturer's web site to download a piece of software I needed. They require you to register with a user name and password and supply the usual information (email address, phone number, cat's dress size and so on). I ploughed through the form, filling in all the compulsory fields. On the way it asked for my state and zip (even though I started from the UK site); I felt like being accurate so I entered "Fed up" and "Closed". When I pressed "Submit" there was a delay and then a message box saying I couldn't register that user name because it was already registered. I was even more fed up so I cancelled the attempt to register. A few seconds later I got an email welcoming me to the "Resource Center" and supplying the user name and password (of the previously-registered user). :laugh:
Phil
The opinions expressed in this post are not necessarily those of the author, especially if you find them impolite, inaccurate or inflammatory.
Phil J Pearson wrote:
it asked for my state and zip [...] I felt like being accurate so I entered "Fed up" and "Closed".
:laugh: :laugh: :laugh:
Phil J Pearson wrote:
I got an email welcoming me to the "Resource Center" and supplying the user name and password (of the previously-registered user).
I've heard stories of how good-natured people point out these security flaws and get accused (and worse) of 'hacking'. :doh:
Cheers, Vıkram.
"You idiot British surprise me that your generators which grew up after Mid 50s had no brain at all." - Adnan Siddiqi.
-
I visited a certain device manufacturer's web site to download a piece of software I needed. They require you to register with a user name and password and supply the usual information (email address, phone number, cat's dress size and so on). I ploughed through the form, filling in all the compulsory fields. On the way it asked for my state and zip (even though I started from the UK site); I felt like being accurate so I entered "Fed up" and "Closed". When I pressed "Submit" there was a delay and then a message box saying I couldn't register that user name because it was already registered. I was even more fed up so I cancelled the attempt to register. A few seconds later I got an email welcoming me to the "Resource Center" and supplying the user name and password (of the previously-registered user). :laugh:
Phil
The opinions expressed in this post are not necessarily those of the author, especially if you find them impolite, inaccurate or inflammatory.
I usually put in my boss' information; let him get the marketing junk they send.
-
I usually put in my boss' information; let him get the marketing junk they send.
I was satisfied that this site wasn't going to send me marketing junk. Anyway ... I am my boss.
Phil
The opinions expressed in this post are not necessarily those of the author, especially if you find them impolite, inaccurate or inflammatory.
-
I usually put in my boss' information; let him get the marketing junk they send.
and then you discover you can't activate your account without something that was emailed to your boss. :doh:
Today's lesson is brought to you by the word "niggardly". Remember kids, don't attribute to racism what can be explained by Scandinavian language roots. -- Robert Royall
-
I was satisfied that this site wasn't going to send me marketing junk. Anyway ... I am my boss.
Phil
The opinions expressed in this post are not necessarily those of the author, especially if you find them impolite, inaccurate or inflammatory.
Do you hate yourself?
Software Zen:
delete this; -
Do you hate yourself?
Software Zen:
delete this;I certainly do sometimes. When I do I fully understand and agree with the reasons.
Phil
The opinions expressed in this post are not necessarily those of the author, especially if you find them impolite, inaccurate or inflammatory.