Article View: uk.comp.vendors
Article #85Re: Techdirect Security Exposure?
From: John Perry
Date: Wed, 22 Mar 2000 00:00
Date: Wed, 22 Mar 2000 00:00
23 lines
1645 bytes
1645 bytes
{$PW$}@womar.co.uk (Paul Womar) wrote:
>John Perry <JohnPerry@redoak.co.ukNOSPAM> wrote:
>
>> My question is, how can I have been recognised as Paul on a secure site?
>> This is worrying.
>
>At a guess, some pleb has decided to identify people by their IP address
>and you have been assigned the address that "Paul" was suing as your
>dialup address or you use the same web cache and the address of the
>cache is logged, which is even more worrying. Or, your ISP's web cache
>is storing copies of the pages this guy received and techdirect keep the
>URLs the same for each page and adapt the content to the customer.
The problem is that Techdirect have not set a flag to prevent caching of
the https page, and they should fix it.
They never replied to my email either
--
John Perry: JohnPerry@redoak.co.ukNOSPAM
http://www.redoak.co.uk
PGP 2.6.2 public key available ** Delete NOSPAM in reply address **
Technical Details
Message-ID:
<de3idscqce5l0lhdvraap5b17enti54aif@4ax.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<ufpfdso0vu2l1tl2pif4tco0ej0egv7eep@4ax.com> <1e7vb5u.7yryzs1wfjk9xN%{$PW$}@womar.co.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1036bc,8e029ff31b5c1788
X-Google-Attributes: gid1036bc,public
X-Google-Thread: fe0e9,8e029ff31b5c1788
X-Google-Attributes: gidfe0e9,public
From: John Perry <JohnPerry@redoak.co.ukNOSPAM>
Subject: Re: Techdirect Security Exposure?
Date: 2000/03/22
Message-ID: <de3idscqce5l0lhdvraap5b17enti54aif@4ax.com>
X-Deja-AN: 600950393
Content-Transfer-Encoding: 7bit
References: <ufpfdso0vu2l1tl2pif4tco0ej0egv7eep@4ax.com> <1e7vb5u.7yryzs1wfjk9xN%{$PW$}@womar.co.uk>
Content-Type: text/plain; charset=us-ascii
Organization: Redoak
Mime-Version: 1.0
Reply-To: JohnPerry@redoak.co.ukNOSPAM
Newsgroups: uk.comp.vendors,demon.tech.pc