4 ms·
I presume most websites that weren't expecting to find an O2 number in the HTTP headers won't have looked for it, won't have logged it, etc. If I send a secret
by mooism2 15y ago
I presume most websites that weren't expecting to find an O2 number in the HTTP headers won't have looked for it, won't have logged it, etc.
If I send a secret to you in the post, and you put the envelope in the recycling unopened, have I disclosed a secret to you?
- uptown 15y agoyes
- civild 15y agoIt's quite straightforward to dump the entire header in a web log or database, and I'm sure some sites do. They might have put the envelope in the recycling, but they never have it emptied and someone just told them it contains a £20 note.
- mooism2 15y agoIt's quite straightforward to dump the entire header in a database, but most sites don't. None of my sites do. Apache, lighttpd, thttpd, etc don't (maybe they do with an appropriate plug-in). People seemed to be reacting as if every website an O2 customer visited was going to add their phone number to their files, and that's not the case.
- Torn 15y ago> If I send a secret to you in the post, and you put the envelope in the recycling unopened, have I disclosed a secret to you? Yes. Intent and the fact you did it is what matters here.
- mooism2 15y agoO2 are saying the intent wasn't there.
- noobiscus 15y ago"If I send a secret to you in the post, and you put the envelope in the recycling unopened, have I disclosed a secret to you?" Oh god yes. Everyone who reads your comment is hoping you don't work with financial, personal, confidential or (eek) classified information.