Text 5843, 63 rader
Skriven 2005-03-02 12:46:57 av Thom LaCosta (1:261/1352.0)
   Kommentar till text 5805 av Björn Felten (2:203/2)
Ärende: Talley's and Witt's illegal home invasions
==================================================
Björn Felten wrote in a message to mark lewis:

 ml> why would i want to do that? all i'm pointing out is the fact that the
 ml> link is not and was not ever hidden... it has always been right there in
 ml> plain site since it was put on the page...

 BF>    Of course it is and has always been hidden. Even Roy says that I
 BF> "tried to hide it". It has no invitation associated to it, so if
 BF> you click on the pi you become an uninvited guest in my home. 

That isn't the way html works...so you are in error.
 BF> If
 BF> you set your system to only use 256 colours you don't even see the
 BF> pi. And you yourself have admitted that you thought it had to do
 BF> with some statistics.

I just logged into an account that uses lynx on a sun server....my screen is
monochrome...guess what, the link shows up, not as Pi, but as a lowercae p.
It is obviously a link, and obviously not hidden.

If it were hidden, then I couldn'[t see it at all.

 BF>    Do you think Aunt Bessie, 75, could manage to download any of
 BF> the files without proper instructions? I just checked my log files,
 BF> and so far I've had more than 1000 hits on the first pages, but,
 BF> before Witt started his smearing campaign here, only 9 (uninvited)
 BF> visitors found the way to any of the next pages.

 BF>    I think the question is, where do you draw the limit of hacking.
 BF> If a log-in window pops up, and it does not specifically mention
 BF> that the guest/guest combo will work, are you then hacking into my
 BF> computer, when you successfully try it? 

Are you asking if I guess the user name and password and then log in, am I
hacking your computer?

If you leave your files and folders unprotected and your public html code
points people to them, you shoudn't blame them for following a link you
provided.

 BF> If you study the source and
 BF> discover how you can side-step the log-in, are you then hacking
 BF> into my computer?

Which source code....the very public, obvious and unsophisticated web pages
that call SECRET.HTM and SECRET2.HTM or the .htaccess file that apparenty
protects one of your folders?

If you answer web pages that call SECRET.HTM and SECRET2.HTM it's an idication
that you do NOT understand how html and serrver security function.  If that's
the case, I'm sure many people can point you towards reference works that will
assist you.

From my perspective, the fact that you make links to your files public, tells
me that you want folks to access them, since if you didn;t want them accessed,
you could easily protect them.


cya,
thom
http://www.tlchost.net/echolist/ 
--- GEcho 1.20/Pro
 * Origin: Home of The Other Robot (1:261/1352)