10:43 One little story | |
| Last weekend, met up with old friends with whom we begin to comprehend "computer science", engaged in different times during web programming, kryakingom software and other matters. Over a glass of beer remembered different computer tales, one of which I would like to tell here. And this story about how the word «javascript» became taboo on Vkontakte. It was in October 2007. Then on vkontakte practiced withdrawal of accounts by stealing cookies, as they have been stored email and Haydee user, as well as the md5 hash of the password without any salt. Therefore, upon receipt of cookies, get a password from the account was a matter of technique (although, in fairness, it should be noted that in the beginning vkontakte ever was one continuous hole. For example, for nearly a month was open hole that allows login under another account simply by changing cookies in your Haydee, on someone else's). For the disposal of cookies attackers offered gullible users under various pretexts skopipastit some code in your browser, which actually blended cookies (try to paste in the address bar, such as "javascript: alert ('')"). So Durov begun to tackle the problem in its own style. First (if not mistaken, 10 October 2007) on the entire site banned from writing the word «javascript» (it is replaced by «javas? 1? Ript»). And apparently was very happy, thinking that solved the problem. But it was not there - the next day, instead of «javascript» hatskery just wrote «Javascript» or «JaVascript». Browser benefit to the register is not fussy ... Register with the problem of course immediately dopravili, but for those who want a little more tasty "cookies", still managed to force users to write into the browser the word «javascript». And then contact the developers took another stroke of genius, prohibiting write the word «cookie», so that no one they just do not eat. You guessed it, hatskery in debt have not gone and simply replaced document.cookie on ... eval ('document.coo' + 'kie'). :) Here's a little story here, morals each of which may make for himself. | |
|
| |
| Total comments: 0 | |