[no subject]

> So, I received an email from blockbuster telling me I had a free movie 
> rental coupon. I was expecting it, as it's some plan my wife joined. 
> The interesting thing is, I selected the link, a page loaded in my 
> browser, then I get a popup saying that the coupon has been sent to my 
> default printer.


Even more interesting is that the the link has a query string that's 
pretty easily discernable what the values are.  Essentially, you can 
create your own coupon, with different expiration dates, and even a 
different barcode pattern (pretty neat if you ask me).  If I was really 
malicious (read: had lots of free time on my hands), I'd start 
collecting those barcode patterns and deciphering those:

"I've never seen this coupon before, but here are your 5 free movie 
rentals, and a free box of ju-ju beans...."

-- 
Charles Brian Quinn
www.seebq.com


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00167.html">[ale] OT: Speedfactory dropping  USENET news</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00169.html">[ale] Find IP-address from MAC address</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00163.html">[ale] web site prints to my printer without my interaction!</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00172.html">[ale] Stripping out crap characters  in perl</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00168"><strong>Date</strong></a></li>
<li><a href="threads.html#00168"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>