Re: Please help ne out of a security trap

Andy, thanks for answering my letter

This is the way I found your site:

Goggle gave me
http://www.hotscripts.com/Perl/Scripts_and_Programs/Chat_Scripts/index.html

linked me to some home-adress 
http://cgiirc.sourceforge.net/

linked me to a demo
http://cgiirc.sourceforge.net/demo/ which was equivalent to http://cgiirc.blitzed.org/ .

Yesterday I tried to explain to [email protected] ( responded from David Leadbeater ) what had happened.


This morning I have examined my cache ( IE5 cache ) and found fragments of what happened yesterday.

------- start of clip -----------
<!-- nothing comment -->
<script>parent.witemaddtext('Status', '-<font color="#008000">NickServ</font><font style="background: #ffffff" color="#000000">- Bad password: It\'s based on a dictionary word!</font><br>', '1', '0');
parent.witemaddtext('Status', '-<font color="#008000">NickServ</font><font style="background: #ffffff" color="#000000">- Your password appears to be insecure, we <b>strongly</b> recommend that you pick another.&nbsp;&nbsp;However, this password has been accepted for now.</font><br>', '1', '0');
parent.witemaddtext('Status', '-<font color="#008000">NickServ</font><font style="background: #ffffff" color="#000000">- E-mail address set to <b>[email protected]</b>.&nbsp;&nbsp;Type <b>/msg NickServ HELP SET HIDE</b> for information on hiding your E-mail address.</font><br>', '1', '0');
parent.witemredraw();</script>
<script>parent.witemaddtext('Status', '-<font color="#008000">NickServ</font><font style="background: #ffffff" color="#000000">- Nickname <b>shoppe</b> registered under your account: cgiirc@*.rny.s.bonet.se</font><br>', '1', '0');
parent.witemaddtext('Status', '-<font color="#008000">NickServ</font><font style="background: #ffffff" color="#000000">- Your password is <b>secret</b> - remember this for later use.</font><br>', '1', '0');
parent.witemaddtext('Status', '-<font color="#008000">NickServ</font><font style="background: #ffffff" color="#000000">- For more information on owning your own nickname, please go to:</font><br>', '1', '0');
parent.witemaddtext('Status', '-<font color="#008000">NickServ</font><font style="background: #ffffff" color="#000000">- <a href="http://www.blitzed.org/users/newnick.phtml" target="cgiirc7365" class="main-link">http://www.blitzed.org/users/newnick.phtml</a></font><br>', '1', '0');
parent.witemaddtext('Status', '-<font color="#008000">NickServ</font><font style="background: #ffffff" color="#000000">- If you\'re interested in learning more about Blitzed or giving us some feedback, you might want to subscribe to our public discussion list.&nbsp;&nbsp;To do so, please visit <b><a href="http://lists.blitzed.org/listinfo/public." target="cgiirc54158" class="main-link">http://lists.blitzed.org/listinfo/public</b>.</a>&nbsp;&nbsp;Thanks!</font><br>', '1', '0');
parent.witemredraw();</script>
<script>parent.witemaddtext('#cgiirc', '<font color="#000080">&lt;</font><font style="background: #ffffff" color="#000000">CGI982</font><font color="#000080">&gt;</font><font style="background: #ffffff" color="#000000"> oh shit! I forgot to wash my hands before using my computer..</font><br>', '2', '0');
parent.witemredraw();</script>

----- end clip -------

I think we can drop the whole thing - Maybe I was mislead by the last message, apparently written by some other user.

Sorry for taking your time

Hans








----- Original Message ----- 
From: "Andy Smith" <[email protected]>
To: "TWS TRAINWARE AB" <[email protected]>
Cc: "Blitzed Web Team" <web-Hb7ITwsGSD4lroQnaJEqWdi2O/[email protected]>
Sent: Friday, February 21, 2003 4:29 AM
Subject: Re: [web] Please help ne out of a security trap


> On Thu, Feb 20, 2003 at 08:48:30PM +0100,  TWS TRAINWARE AB wrote:
> > 
> >    I  just tested your demo-site. I'm sorry to say that I might have been
> >    fooled to give away secret information
> > 
> >    as a result of no help.
> > 
> > 
> > 
> >    I  was  registred as schoppe whith some password that had no relavance
> >    for  my  economy, but that might be misused by other chatters that can
> >    steal my identaty and use it in an unpleasant way.
> > 
> > 
> > 
> >    Please take away the account - I'll come back later if you do that.
> 
> I'm sorry, I really have no idea what you are asking us to do.