Great Circle Associates Firewalls
(April 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: BoS: Netscape2.0 sends mail to the world without authority
From: peter @ baileynm . com (Peter da Silva)
Date: Mon, 29 Apr 1996 10:28:57 -0500 (CDT)
To: shawn @ aob . org (Shawn Steele)
Cc: Firewalls @ GreatCircle . COM
In-reply-to: <9604290835 . ZM2019 @ aob . org> from "Shawn Steele" at Apr 29, 96 08:35:52 am

> I was somewhat more surprised to find use the URL:

> ftp://someone:password @
 ftp .
 com/whatever/file

> in netscape (at least 2.0 & 2.01) to retrieve a file.

This is a standard URL... check the RFC.

And, yes, it'd be stupid to use it for account passwords. Especially through
a proxy where that string will get dutifully logged...

It's OK for grocery-coupon level stuff...


References:
Indexed By Date Previous: Re: A so called "spoofer"
From: Rabid Wombat <wombat @ mcfeely . bsfs . org>
Next: DHCP server ...
From: "Ing. Rosa Isela Gonzalez Alvarez." <rgonzale @ leo . uacj . mx>
Indexed By Thread Previous: Re: BoS: Netscape2.0 sends mail to the world without authority
From: Shawn Steele <shawn @ aob . org>
Next: Re: BoS: Netscape2.0 sends mail to the world without authority
From: ken @ bridge . com

Google
 
Search Internet Search www.greatcircle.com