4 ms·
the problem is good faith and desire? if theres a bunch of numbers in my url after i login, and i'm oh so curious what i'd see if i increment that number by 1,
by lazylizard 9y ago
the problem is good faith and desire?
if theres a bunch of numbers in my url after i login, and i'm oh so curious what i'd see if i increment that number by 1, now i'm hacking? i mean, i believe the website simply didnt want to implement session control, if i saw someone else's account details, is that acceptable interpretation? there's no "rule of the internet" that says we must only navigate by provided links on a html page, is there?
- dsacco 9y ago> if theres a bunch of numbers in my url after i login, and i'm oh so curious what i'd see if i increment that number by 1, now i'm hacking Under the definition above, if you do it to deliberately bypass the control, then yes. If you do it out of curiosity without believing you might subvert any control, then no you're not hacking.