MWSF: Web flaw yields free Macworld VIP pass |
|
|
A security researcher has found a way to get a free "Platinum" pass to Macworld by hacking the conference site.
The problem was that the site was downloading an encrypted version of the promotional codes to the browser so that it could check for discounts before passing data to the event's server. Site developers may have done this to reduce the time it takes to process conference applications, but in doing so they introduced a serious security vulnerability, Grutzmacher said.
|
