Comments on: Incompetent Boobs Part 2

By: Bennett

Bennett — Tue, 01 Jul 2008 23:00:29 +0000

I completely agree about unsafe GET.

Do not think usernames and passwords will protect you. They won’t. Do not think nonces or referrer checks or JavaScript or proxy busting query strings will protect you. They won’t.

Just to be accurate, these things will protect you. But they do not offer 100% protection. And neither does POST, though it will protect you from spiders that follow GET links.

By: Curtis Cunningham

Curtis Cunningham — Thu, 26 Jun 2008 18:09:16 +0000

Wow, this is shocking! I’ve been pretty uneasy about having many/any of these types of plugin installed. Been using Safari on Mac for the last few months, so not many toolbars available for that (I don’t have any installed). When I use Firefox usually the only one I tolerate is the google toolbar, and that’s disabled most of the time.

Thanks for the extremely informative post.

By: Dave

Dave — Mon, 23 Jun 2008 08:44:39 +0000

Go on then…enlighten us?

By: John Cowan

John Cowan — Fri, 20 Jun 2008 15:08:04 +0000

Baboons, is more like it.