Re: password protected webpages

by "rudy limeback" <r937(at)interlog.com>

 Date:  Wed, 5 Apr 2000 08:51:51 -0400
 To:  <Brockfamily(at)xtra.co.nz>,
<hwg-techniques(at)hwg.org>
  todo: View Thread, Original


>An idea may be to try JavaScript protection, this can be made almost
>impossible to crack, by creating an external JavaScript that contains
>the stuff ( password and usernames), read the page at 
>http://www.crosswinds.net/~wmrsite2/scripts/extpassword.html

dear mister broccoli man

let's try this with a real world example

in internet explorer, type

   http://www.cnn.com/virtual/2000/code/main.js

into the address bar

you're asked if you want to save it to disk

in netscape, type

   view-source:http://www.cnn.com/virtual/2000/code/main.js

into the address bar

you see the external source right away, dude

not so impossible to crack, after all

_____________
rudy limeback
http://r937.com/
http://evolt.org/

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA