Clearly, building a product such as a publicly-accessible airline passenger check-in kiosk using Internet Explorer and Windows is a very bad design decision if you care at all about preventing this sort of information disclosure.
Even so, IE can and should be configured so as not to display such script errors.
Furthermore, the use of an IP address that is outside of the RFC 1918 private subnet address range appears very irresponsible.
Sincerely,
Jason Coombs
jasonc (at) science (dot) org [email concealed]
Vendor: Kinetics USA
www.kineticsUSA.com
Line: 107
Char: 2
Error: object expected
Code: 0
URL: http://151.151.10.46:64080/attract
?time=1124376480&TransactionID=HNL_KIOSK09-050818044716
Clearly, building a product such as a publicly-accessible airline passenger check-in kiosk using Internet Explorer and Windows is a very bad design decision if you care at all about preventing this sort of information disclosure.
Even so, IE can and should be configured so as not to display such script errors.
Furthermore, the use of an IP address that is outside of the RFC 1918 private subnet address range appears very irresponsible.
Sincerely,
Jason Coombs
jasonc (at) science (dot) org [email concealed]
[ reply ]