Article View: uk.comp.vendors
Article #87Re: Techdirect Security Exposure?
From: Hywel Mallett
Date: Wed, 22 Mar 2000 00:00
Date: Wed, 22 Mar 2000 00:00
21 lines
1689 bytes
1689 bytes
"Paul Womar" <{$PW$}@womar.co.uk> wrote in message
news:1e7vb5u.7yryzs1wfjk9xN%{$PW$}@womar.co.uk...
> John Perry <JohnPerry@redoak.co.ukNOSPAM> wrote:
>
> > My question is, how can I have been recognised as Paul on a secure site?
> > This is worrying.
>
> At a guess, some pleb has decided to identify people by their IP address
> and you have been assigned the address that "Paul" was suing as your
> dialup address or you use the same web cache and the address of the
> cache is logged, which is even more worrying. Or, your ISP's web cache
> is storing copies of the pages this guy received and techdirect keep the
> URLs the same for each page and adapt the content to the customer.
I thought secure pages were not supposed to be cached anyway? Only stuff on
port 80?
The IP address being recognised sounds a reasonable explanation, although
not excusable!
--
Hywel Mallett
Technical Details
Message-ID:
<XZcC4.2929$Dd2.160638@stones>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<ufpfdso0vu2l1tl2pif4tco0ej0egv7eep@4ax.com> <1e7vb5u.7yryzs1wfjk9xN%{$PW$}@womar.co.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1036bc,8e029ff31b5c1788
X-Google-Attributes: gid1036bc,public
X-Google-Thread: fe0e9,8e029ff31b5c1788
X-Google-Attributes: gidfe0e9,public
From: "Hywel Mallett" <Hywel@hmallett.force9.net>
Subject: Re: Techdirect Security Exposure?
Date: 2000/03/22
Message-ID: <XZcC4.2929$Dd2.160638@stones>
X-Deja-AN: 601129918
References: <ufpfdso0vu2l1tl2pif4tco0ej0egv7eep@4ax.com> <1e7vb5u.7yryzs1wfjk9xN%{$PW$}@womar.co.uk>
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600
X-Complaints-To: abuse@plus.net.uk
X-Trace: stones 953768951 212.56.127.157 (Wed, 22 Mar 2000 23:49:11 GMT)
X-MSMail-Priority: Normal
NNTP-Posting-Date: Wed, 22 Mar 2000 23:49:11 GMT
Newsgroups: uk.comp.vendors,demon.tech.pc