//flex table opened by JP

Click to See Complete Forum and Search --> : (Minor) Internet bookmark security flaw


johnkpresence
09-10-2001, 02:34 PM
Hi all. Just found something funny, re: internet bookmarks.
Certain websites must not have very good security measures, because it turns out that you can export bookmarks to another machine, and then use that machine to logon to the website, without having to know the password. Probably, this only works if the existing bookmark is a logged-on record.
An example of this is a real estate information site. The PC I was using was someone else's, but I had authority to use the site because I took over her job. I did not have an account with the site, but she did.
I found the flaw when I had to start using another PC. I exported the bookmarks to our net, imported them to my new PC, and was able to get right on the site without any problem. Just something to think about.

socalgal
09-10-2001, 11:04 PM
Interesting... thanks for the info.

I assume this works if the cookies for the site are enabled and / or stored on the machine to which the bookmarks are transferred. Auto-Complete prolly plays a part in it, too.