independent and unofficial
Prince fan community
Welcome! Sign up or enter username and password to remember me
Forum jump
Forums > General Discussion > In Celebration of April Fools, here's how to compromise another orger's account...
« Previous topic  Next topic »
  New topic   Printable     (Log in to 'subscribe' to this topic)
Author

Tweet     Share

Message
Thread started 04/01/03 12:25pm

Tom

avatar

In Celebration of April Fools, here's how to compromise another orger's account...

This is only going to last a short while, that is if this thread isn't immediately deleted. So you may want to print this out. While it can be amusing to impersonate another orger, it also exposes a pretty significant hole. The spoofing of other orgers accounts does not involve stealing their passwords or gaining access to their personal information, but rather the ability to create duplicate accounts with the same name.

On March 21 an exploit was discovered by a visitor to this site who is not necessarily a member, while seeking some assistance with the now infamous "." thread.

1.) First you must navigate to another orgers profile (the one you wish to impersonate) and right-click on a blank area of the page and select "Properties". Look at the line that says "Address" and copy it and paste it into a new browser window. You will now have access to the toolbar across the top. Reopen their profile in the new browser window (it may ask you to log in again which is ok) and choose "Save As". Save it somewhere convenient as you will need it again shortly.

2.) Now navigate to your temporary internet files. On Windows XP machines the folder will be somewhere like C:\Documents and Settings\YOUR USERNAME\Local Settings\Temporary Internet Files. In here you will find a Prince.org cookie. Open this file with notepad. You will see your username in here, replace it with the username you wish to impersonate. Then save the file.

3.) Right click on the html page you saved to your desktop and look for the following piece of code:

saved from url=(0062)http://www.prince.org/profile/VICTIMSNAME?u=VICTIMSNAME&pu=1

Replace both instances of the victim's username with YOUR current username then save the html file. Now double click the file and it should relaunch the page in Internet Explorer. At this point I have no idea what you will see because I'm making all this shit up as a joke. Sucker! Have a nice day! hehheh.
[This message was edited Tue Apr 1 12:27:08 PST 2003 by Tom]
  - E-mail - orgNote - Report post to moderator
Reply #1 posted 04/01/03 12:28pm

applekisses

lol THAT's a great one! smile The best I've seen all day.
  - E-mail - orgNote - Report post to moderator
Reply #2 posted 04/01/03 11:41pm

Natsume

avatar

flip u
I mean, like, where is the sun?
  - E-mail - orgNote - Report post to moderator
  New topic   Printable     (Log in to 'subscribe' to this topic)
« Previous topic  Next topic »
Forums > General Discussion > In Celebration of April Fools, here's how to compromise another orger's account...