Web Sites With No Clue About Security

The operators of these sites have absolutely no clue about security, because they are willing to use techniques that prevent legitimate users from using browser features, without actually preventing other users from doing the things they're presumably trying to prevent.

Examples are preventing users from doing "right clicks" on their mouse, hoping this will discourage the use of the "save as" functionality.

http://event.meetingstream.com ("event console" window)
http://www.onlinenotarycourse.com/Classroom/part1sec9.htm (mousetrap on IE 6.0)
https://vrir.dmv.ca.gov/vrir3/start.do

Here's another cool thing meetingstream has done ... they prevent you from pasting to the address bar using the CTRL key... but you can paste to it using right-click.

Topic WebSitesWithNoClueAboutSecurity . { Edit | Ref-By | Attach | Diffs | r1.4 | > | r1.3 | > | r1.2 | > | r1.1 }

You must register before editing pages or using other extended features on this TWiki system.

Revision r1.4 - 16 Aug 2009 - 22:45 by EliMantel
Privacy Policy Copyright © 2000-2005 by the contributing authors. All material on this collaboration tool is the property of the contributing authors. Collect email addresses here.
Ideas, requests, problems regarding TWiki? Send feedback.

	TWiki . Edumacation . WebSitesWithNoClueAboutSecurity	TWiki . { Main \| Edumacation \| TWiki \| Test }
	Edumacation . { Home \| Users \| Changes \| Search \| Go }