[cap-talk] practical "weak capabilities"

Karp, Alan H alan.karp at hp.com
Mon Mar 5 10:44:56 CST 2007


Matej Kosik wrote:
> 
> Did you see any similar obvious example?
> 
Many.

1. The proxy statement to vote online for the HP annual meeting is a
6-digit, presumably unguessable number.

2. My ability to enter referee reports for a conference is a URL with an
unguessable component.

3. The confirmation you receive when making a car reservation online at
Hertz has links that include your (unguessable) confirmation number for
changing your reservation.

_________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories 
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp/
  



More information about the cap-talk mailing list