Robert Swiecki wrote:
> The second one is based on the http URI scheme which allows embedding
> user/password parameters into it, i.e. http://user:password (at) domain (dot) com. [email concealed]
> Such parameters can contain whitespaces, so the attack vector is quite
> obvious.
...
Hash: SHA1
Robert Swiecki wrote:
> The second one is based on the http URI scheme which allows embedding
> user/password parameters into it, i.e. http://user:password (at) domain (dot) com. [email concealed]
> Such parameters can contain whitespaces, so the attack vector is quite
> obvious.
...
[ more ]