4 ms·
Just to be clear, by "script" here do we mean "Dude, check this out, you can just change /accounts?id=12345 to /accounts?id=12346"?
by Cushman 14y ago
Just to be clear, by "script" here do we mean "Dude, check this out, you can just change /accounts?id=12345 to /accounts?id=12346"?
- denzil_correa 14y agoGood point. The question I would ask is - Should he be doing even that given the fact he is in complete knowledge of the situation?
- deleted 14y ago[deleted]
- duskwuff 14y agoBy "script", we mean a program written in PHP* which would generate plausible iPad ICC-IDs, run them by AT&T's web site, and save any ICC-IDs and email addresses it ended up with. *: per the Gawker article, http://gawker.com/5559346/apples-worst-security-breach-114000-ipad-owners-exposed http://gawker.com/5559346/apples-worst-security-breach-11400...