3 ms·
The article also mentions that Weev exploited a security hole in AT&T's servers; a complete misunderstanding and/or misrepresentation of the truth.
The article also mentions that Weev exploited a security hole in AT&T's servers; a complete misunderstanding and/or misrepresentation of the truth.
What is the truth?
If I'm not mistaken, a bunch of GET requests against a public API, unfortunately setup to not require authorization credentials and yet still exposing nominally 'private' data.
Nuance is a hell of a thing.
114,000 '200 OK' responses = 41 months in prison.
That's correct. It was basically:
wget http://att.com/obscure/url?id={1..114000}
Aaaaand that's a prison sentence.
deleted 13y ago
[deleted]