News for hackers. Stuff that matters.
Re:Ask HN: Techniques to go around IDS systems? by cperciva on Wednesday August 12, 2009 @07:38PM (#759581)
How do I fool this sucker?

Don't. Attempting to circumvent access control measures could not get you thrown in jail.

Re:Ask HN: Techniques to go around IDS systems? by profquail on Wednesday August 12, 2009 @08:36PM (#759697)
Attempting to circumvent access control measures could not get you thrown in jail.

If you don't have to worry about getting thrown in jail, I wonder why more people aren't doing it? ;)

Anyway, to answer the OP's question...is there some combination of POST options that loads the entire class schedule at once? I know my school's (U of Alabama) system had a form where you could select all of the course departments and load the entire schedule on one page.

Also, do you really need to reload the data so often? If the IT department is worried about server load, perhaps you could arrange to get a data feed once or twice per day (overnight would probably be best).

Re:Ask HN: Techniques to go around IDS systems? by zaidf on Wednesday August 12, 2009 @09:05PM (#759731)
Yeah, the function of the site is to alert you the moment a class opens up. So I need to get the data as often as I can.

If the IT department is worried about server load, perhaps you could arrange to get a data feed once or twice per day (overnight would probably be best).

Tried that. All they would have to do is put all the data on one page instead of me having to make 130 requests(one for each department). They refused saying they don't have resources. I've tried to be as nice as I possibly can be and they've been as dick-like as they can be.

My last resort would be to ask our user-base to call the IT office and voice their support.

Re:Ask HN: Techniques to go around IDS systems? by anamax on Wednesday August 12, 2009 @09:22PM (#759755)
> My last resort would be to ask our user-base to call the IT office and voice their support.

Why isn't that your first resort?

Re:Ask HN: Techniques to go around IDS systems? by HalcyonMuse on Thursday August 13, 2009 @02:11AM (#760124)
This seems like a great idea to me, as it could get you a job, and make your service much faster, in that you could build your notification system into the class scheduling system, which would mean you wouldn't need to poll their system every 3-7 minutes - it could be event-driven instead. (Dropping a class could trigger a check of who's watching the class and notify recipients that way.)

Writing in that line or two of code would also take care of the school's strange DoS concerns.

Of course, if profit is the goal, this isn't an option (though it doesn't look like you're trying to monetize this... kudos for that).

Also, this removes the exclusivity from classhunt (as any student would see this while browsing the schedule online). I'm sure you can make more inferences about this option. (Less social capital in the business world as you have nothing to point at and say "I did that," etc.)

Re:Ask HN: Techniques to go around IDS systems? by cperciva on Thursday August 13, 2009 @03:29AM (#760220)
could not get you thrown in jail

Apparently I was half-asleep when I wrote that. I meant "could get you thrown in jail", of course...