Vulnerability Development: Re: Cookies

[J Edgar Hoover <zorch () RIGHTEOUS NET>]

On Tue, 8 Aug 2000, Crist Clark wrote:

> George wrote:
> > [Attribution lost earlier]
> > > Yep, I thought about it some.  Never did an experiments however.
> > > I assume that it is illegal to break into someone else's Web server
> > > in this way.
> > I would assume that if their webserver is requesting information stored on
> > my computer, it is their responsibility to verify that data, not mine?
> If someone asks me to mail them a letter, it is their responsibility to
> check if there is a bomb in the package.
This analogy is way off. Nobody *asks* you anything. The site stuffs their
data on your machine, and expects to retrieve it intact later.

A more appropriate analogy would be this guy knocked on my door selling
something, and hid an envelope under the doormat. Now he's pissed because
it is not as he left it.

> Intent matters.
Consent matters.

> --
> Crist J. Clark                                Network Security Engineer
> crist.clark () globalstar com                    Globalstar, L.P.
> (408) 933-4387                                FAX: (408) 933-4926
>
> The information contained in this e-mail message is confidential,
> intended only for the use of the individual or entity named above.  If
> the reader of this e-mail is not the intended recipient, or the employee
> or agent responsible to deliver it to the intended recipient, you are
> hereby notified that any review, dissemination, distribution or copying
> of this communication is strictly prohibited.  If you have received this
> e-mail in error, please contact postmaster () globalstar com