Article: 2281 of alt.sysadmin.recovery
Newsgroups: alt.sysadmin.recovery
Subject: Re: *BANG* *BANG* *BANG*
From: James Turinsky <f-off@f-you.org>
References: <3c35a110$0$1614$f5f63664@news.tdin.com> <CNjZ7.13264$Ix.1892652216@newssvr17.news.prodigy.com>
Organization: none
User-Agent: Xnews/4.11.09
X-No-Archive: yes
Approved: ICBM launched.
X-No-Ahbou: Yes
Date: 04 Jan 2002 17:54:33 GMT
Lines: 68
Message-ID: <3c35ec57$0$37106$f5f63664@news.tdin.com>
NNTP-Posting-Host: caef873a.news.tdin.com
X-Trace: DXC=DnDKWZXPbQB=8GH:38>^kMao5L3]O5Wd@W=IBPYHO>5AOK:I8iRG?LGgG4_RgMLBAFj`4k8n6TfZI7N1?o1Vl6BN
X-Complaints-To: abuse@tdin.com
Path: news.meer.net!sea-read.news.verio.net!dfw-artgen.news.verio.net!dfw-peer.news.verio.net!news.verio.net!newspump.sol.net!posts0.nwblwi.newsops.execpc.com!posts.news.tdin.com!reader1-klmzmi.news.tdin.com!not-for-mail
Xref: archive.mv.meer.net alt.sysadmin.recovery:2281

mikea@mikea.ath.cx (Mike Andrews) wrote in
news:CNjZ7.13264$Ix.1892652216@newssvr17.news.prodigy.com: 

> James Turinsky <f-off@f-you.org> wrote:
> 
> [beginning of Quite Nice Rant snipped]

Thank you.

[broken membership form of area IT development alliance with "invoice 
me" or credit card payment options]
 
>: *BANG* *BANG* *BANG* is heard as my head impacts the desk.
> 
>: How nice.  How utterly fscking nice.  This organization is
>: supposedly in charge of attracting and keeping technology business
>: in this part of the state, and yet one can't even JOIN the damned
>: thing because their signup is broken.  And there's no webmaster or
>: administrator address listed to which I could submit this problem.
>:  Instead, there's the general inquiries address. 
> 
>: At this point, I gave a small sigh of relief (having not trusted
>: my credit card information to this place). 
> 
> You can expect to get the invoice, to find that your money goes
> "Poof" as soon as they get the check (which they will cash and 
> deny seeing), and to find that your name never appears on the 
> membership rolls. 

I don't know if I will get an invoice, as the error mentions some MS-
obscured error about "jmail" and no servers could be contacted.  
Funnily enough, they have several other university students listed.

> You can also expect to find your invoice information on a world-
> readable file that is secured only through obscurity and that any
> Joe in the world can view. 

Yes.  Oh yes.
 
> You can expect that any credit card data you might have put
> in the form would be processed, though you got a notice that
> the transaction failed. The failure, of course, would be in 
> that part of the code that puts your name on the rolls, but
> not in the part of the code that sets up for a periodic charge
> to your credit card. 

Oh yes oh yes.
 
> And, of course, your credit card data would be available to the
> world. 

Oh *YES*!  I would have a field day if this were the case, as I'd take 
down as much info as possible and go directly to every media outlet I 
could think of with the story "Area IT Alliance Site Hacked" or 
something similar.  It'd have to make the newswire, just for the irony 
aspect of an organization of IT professionals and businesses and the 
govt. with a broken, insecure, wide-open site.  It'd ruin the excuse 
for technology business in this part of the state, and cast a shadow on 
the rest of the state.  I *LIKE* it!

ObLocation: 41.502056121826 -82.955081462860 576 James Turinsky
(According to DeLorme Earthamaps page source + USGS)
or 41.50000000000000000000 -83.00000000000000000000 576 if I take a 
short walk into the field behind the house.  And abs(-83.0) = 41.5 * 2  
Weird, huh?  At least you can start to divine the organization I'm 
talking about and stay far far away from them if you like.

JT


