Hacker News new | ask | show | jobs
by ackalker 3566 days ago
Mmm, love the good ole'style hack. Find a hole in the system and peek through, good-natured of course. Reminds me of how I discovered that some hosting company's FTP server supported the somewhat obscure `cdup` command (which should work identical to `cd ..`), but didn't check if the connecting user actually had access rights to poke around that parent directory (it did for `cd ..`).

Much mischievous grinning ensued as I showed to my colleagues how i could "escape" from our allotted home directory and look at directories of some of the other clients, before I reported it to the hosting company. I don't know if they ever fixed that loophole...