Here we go again - ISP DPI, but is it interception?
Brian Morrison
bdm at fenrir.org.uk
Fri Jul 30 17:15:55 BST 2010
On Fri, 30 Jul 2010 17:06:15 +0100 (BST)
Chris Edwards <chris-ukcrypto at lists.skipnote.org> wrote:
> On Fri, 30 Jul 2010, Peter Fairbrother wrote:
>
> | I don't get it.
> |
> | If I want to find out whether a site allows directory traversal -
> some sites | do, some don't - how else am I going to find out other
> than adding a "/.." ?
>
> And it seems the tsunami hacker didn't even add "/.."
>
> - he simply truncated the URL, to find a parent or root page.
>
> Which seems even more unlikey to do damage!
As ever, in certain circumstances insane decisions are reached in
court, usually because they can be....
--
Brian Morrison
More information about the ukcrypto
mailing list