Comment

Comment by ackalker

Mmm, love the good ole'style hack. Find a hole in the system and peek through, good-natured of course. Reminds me of how I discovered that some hosting company's FTP server supported the somewhat obscure `cdup` command (which should work identical to `cd ..`), but didn't check if the connecting user actually had access rights to poke around that parent directory (it did for `cd ..`).

Much mischievous grinning ensued as I showed to my colleagues how i could "escape" from our allotted home directory and look at directories of some of the other clients, before I reported it to the hosting company. I don't know if they ever fixed that loophole...

parent ackalker 10 years ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton