Re: Form Security

Chung Leong wrote:
Jerry Stuckle wrote:

I know *exactly* how auto-form-submission works. In fact, from your
posts here I expect I know a lot more about it than you do. I've been
in this field too many years. What you describe is only *one way* it can
happen. And it's not even the most common.


What I described was a vulnerability that can be countered by the
method proposed by the OP. Thus I assumed that is in fact what he is
referring to when he said auto-submission and responded accordingly. I
don't really feel the need to interpret other people's statements in
the worst light in order to show that I'm more knowledgeable.


And I wasn't interpreting it in the "worst of light". I was interpreting it in the light of simple security.

What he's proposing is false security - which is worse than no security at all. At least with the latter you know you have potential vulnerabilities.

And no, this isn't great security - but what he's proposing will NOT stop auto-submission by any means.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@xxxxxxxxxxxxx
==================
.

Relevant Pages

  • Re: Dotfuscator and others
    ... And hugely inaccurate. ... interpret this, but I'll compile it at the very last minute instead." ... mixed-mode JVM, interpreting code sometimes and JIT-ting it at other ... How many security vulnerabilities have been announced in .NET products? ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Confirmed Cases Of Trapdoors By Overseas Programmers ?
    ... >You can also interpret that as "muslem security is sooo good its software ... No, *you* can interpret it however you want, even as "moon be green ... >Sami talked about Muslem reputation for security. ... and Open source Firebird 0.9-3 and earlier ...
    (comp.security.misc)
  • Security Event Viewer
    ... Is there somewhere I can go to learn how to interpret what the Security ... system log? ... or are packets being delivered to my PC by persons trying ...
    (microsoft.public.win2000.security)
  • events viewer
    ... necessary to interpret the readings of the events ... viewer. ... I am interested in the security section in order ...
    (microsoft.public.windowsxp.basics)
  • Re: Form Security
    ... What he's proposing is false security - which is worse than no security ... it's crap because it doesn't stop bots. ...
    (comp.lang.php)