From: Alan Olsen <alan@ctrl-alt-del.com>
Date: Wed, 21 May 1997 13:16:24 +0800
To: Bill Frantz <frantz@netcom.com>
Subject: Re: Hacked, Trashed and Out of Beer
In-Reply-To: <199705210121.UAA13946@manifold.algebra.com>
Message-ID: <3.0.2.32.19970520220201.00b87520@mail.teleport.com>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

At 09:47 PM 5/20/97 -0700, Bill Frantz wrote:
>At 6:21 PM -0700 5/20/97, se7en <se7en@dis.org> wrote:
>>Well, I finally managed to catch up on all the email from this list, and
>>managed to also get all of the hacked web sites thus far up on my web
>>page at http://www.dis.org/se7en
>>
>>w-h-i-c-h includes:
>>
>>Amnesty International
>>Central Intelligence Agency
>>East Timor, Indonesia
>>Kriegsman Fur
>>NASA
>>U.K. Labour Party
>>U.S. Air Force
>>U.S. Department of Justice
>
>Gee, your server sure wants to send a lot of cookies.  I consider receiving
>a cookie before getting a statement, or being able to guess (e.g. WEB
>shopping), about their use to be an unfriendly act.

Sounds like the AUTH_COOKIE module at work again.  Pretty easy to fix.  Just 
comment out the AUTH_COOKIE module (which should not be turned on anyways) in 
the src/Configuration file and recompile.  Keeps people from being cookie-
bombed into the stone age.

<rant align=tech>
AUTH_COOKIE is actually something for excessive user tracking.  It sends a 
cookie for every object sent by the server.  If they have Netscape 3.0 and
are 
tracking such things, it becomes a real pain.  Since few webmasters, if any, 
have log crunchers that will even use that data (or that anyone cares...) it 
is a waste of log space in the first place.  It also annoys many users.
</rant>
-----BEGIN PGP SIGNATURE-----
Version: 5.0 beta
Charset: noconv

iQEVAwUBM4KBx+QCP3v30CeZAQF+TAf/UNfgOU39PyLPB2i9sq6PK7y2Vum2o3u7
Nb+T9BMdjOa/LmVEkOozcOcwvw6xwPBWIWSOD98yq8WlauQ4xwRiay4Hp6sI++mE
m9KmXfA1fy5SgCAYk8gYL/VvBzhowxjcgo4JulQBBAPzR4lMfwP70eNhXMnkbGsh
iKl8NywrcfvmfZwSaQS8Lb9moDpIXXzCZJKMWJIdeYQdJOYGvQAVSA0W8tIw3bpR
cVk2yJqg8fMcvAhlBwI+YkYrTEtnqzcyC2TwljBYUU3lVl2hWhPJZ5gkgwe2XSUj
UyeaKNr21iXeiXPQ5nM55W9eiBfFnpcKSiMEb+KTQEhdKb/Uxm0Yqg==
=JUGI
-----END PGP SIGNATURE-----

---
|     "Bill Clinton - Bringing back the sixties one Nixon at a time."    |
|"The moral PGP Diffie taught Zimmermann unites all| Disclaimer:         |
| mankind free in one-key-steganography-privacy!"  | Ignore the man      |
|`finger -l alano@teleport.com` for PGP 2.6.2 key  | behind the keyboard.|
|         http://www.ctrl-alt-del.com/~alan/       |alan@ctrl-alt-del.com|