News for hackers. Stuff that matters.

A comment on French journalist "hacks" govt by inputting correct URL, later fined $4,000+. Parent comment

Re: French journalist "hacks" govt by inputting correct URL,... by chengiz on Sunday February 09, 2014 @08:14PM (#7208472)
How so? Was it made clear that the authentication page was for the documents he subsequently downloaded?
[ Parent | on HN ]
Re: French journalist "hacks" govt by inputting correct URL,... by JetSpiegel on Sunday February 09, 2014 @11:12PM (#7209067)
Even if it was, this is ridiculous.

What kind of security let's you download documents without authentication?

[ Parent | on HN ]
Re: French journalist "hacks" govt by inputting correct URL,... by arethuza on Monday February 10, 2014 @04:53AM (#7210050)
It's a surprisingly common bug in custom web-based systems that handle documents or images - I've found this a number of times in systems I was reviewing (and I'm not a security expert).
[ Parent | on HN ]