4 ms·
>> similarly to how people have been prosecuted for "hacking" by retrieving information through trivial tinkering with public URLs I had no clue that happened.
by geekam 14y ago
>> similarly to how people have been prosecuted for "hacking" by retrieving information through trivial tinkering with public URLs
I had no clue that happened. Scary.
- damian2000 14y agoGood example of it here: http://risky.biz/minter http://risky.biz/minter (direct object reference in URL)
- mitchty 14y agoIt goes back to really old case law as to "allowed" access to a computer system. Basically if you see a url with /foo.html?user=1234 and you go, hmm lets switch the number to 1235 and see what happens. Basically that is outside of reasonable expectations to access a system. Or something like that, i'm not a lawyer but that is how I understand the case law works for now.