Its like they all landed here for a family BBQ. I never saw this before.

I needed to take a break from programming content systems. These pictures are formula driven and took random color samples from the pic of (e:mike) high fiving the skyway , and were inspired by that guys parasol.

This is a stupid practice for anyone. Never make your username/password the same thing, never make them both tiny numbers.

I can't believe there is this commercial paging and directory software for hospitals/government organizations that exists where the vendor must be encouraging customers to use login/password combos that are both that same publicly available ids.

Its so silly because the numbers are so low, even if you didn't have the lookup ability you could just guess, say 4004/4004 until you got it right. Clearly, you can't 100% blame the vendor on this as anyone in their right mind would recognize that is not a secure setup. Especially for an app on the open, public web.

It kills me because I want to tell the people so bad that their data is totally vulnerable but at the same time, I don't want to get involved. Its a real moral dilema.

Even worse, older versions of the software simply let you set the cookie to the ID you want and you are in. That is just lunacy. They fixed the cookie issue after I contacted them by phone a couple years back. Looking back it was so funny trying to explain to their software engineer how insecure using that cookie was - he was not getting it at all.

Sadly, some of their customers haven't upgraded. If I was the vendor I would give away free upgrades because if anyone does exploit this, they will lose all of their credibility.

Its even worse because the vendor lists the organizations right on their homepage.

By the time I unlocked my phone and got the camera ready (e:libertad) was already almost gone. The pic still came out pretty cool with Lara and Cindy in there. In the large size you can see (e:libertad) pretty good.

I think (e:terry) needs one of these.