[cap-talk] practical "weak capabilities"
Karp, Alan H
alan.karp at hp.com
Mon Mar 5 10:44:56 CST 2007
Matej Kosik wrote:
>
> Did you see any similar obvious example?
>
Many.
1. The proxy statement to vote online for the HP annual meeting is a
6-digit, presumably unguessable number.
2. My ability to enter referee reports for a conference is a URL with an
unguessable component.
3. The confirmation you receive when making a car reservation online at
Hertz has links that include your (unguessable) confirmation number for
changing your reservation.
_________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp/
More information about the cap-talk
mailing list