Timeline for L33t Hacking of SE through 404 information leakage
Current License: CC BY-SA 3.0
10 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Dec 3, 2019 at 3:51 | comment | added | user50049 | That's strange, they don't when I go incognito. I'm going to go poking around a bit because it's pretty clear something is unintentional here, I'm just not sure which thing. | |
Dec 2, 2019 at 20:07 | comment | added | jonspaceharper | @TimPost I can confirm that 404 errors include the post title still, at least for me. | |
Dec 2, 2019 at 15:08 | comment | added | user50049 | From what I can tell, this was changed at some point after this answer (I'm guessing around the time we made the unified 404 template). If I hit a deleted question while logged in as someone with the rep to do it, I get a 200 status code, and the deleted question. Without the privilege, I get a 404, without the title of the requested document. | |
Dec 1, 2019 at 20:01 | comment | added | Lightness Races in Orbit | Performing a redirect to add content to the URI when the resource was not found makes no sense! | |
Dec 1, 2019 at 8:14 | comment | added | Shadow Wizard | This is still information leak. People without the required reputation should not be able to see deleted posts, or their title. Sure it's not a big deal, but it's still wrong, in my opinion. | |
Feb 20, 2015 at 16:43 | comment | added | user50049 |
@FamousBlueRaincoat When that happens we get involved, and we have the ability to completely obliterate revisions. <title>These aren't the droid's you're looking for, you creepy sonofabuffoon</title> :)
|
|
Feb 20, 2015 at 16:27 | comment | added | user259867 | For me, offensive titles (possibly leaking personal information about an SE user) is more of a concern than spam. Sometimes these are bad enough to get edited out: here, here, and here. | |
Feb 20, 2015 at 15:13 | vote | accept | CommunityBot | moved from User.Id=194162 by developer User.Id=811 | |
Feb 20, 2015 at 15:13 | comment | added | user194162 | Sounds like "working as designed" then. Thanks for the answer. | |
Feb 20, 2015 at 15:11 | history | answered | user50049 | CC BY-SA 3.0 |