Date: Sun, 20 Aug 2006 21:02:17 +0900
Junichi Uekawa <[EMAIL PROTECTED]> wrote:
> Hi,
>
> > >
> > > Don't make "on vacation" public. It invites burglars in the DD's home.
> >
> > *Nacho prepares his picklock.
> >
> > Hehe, IIRC if you mark "On vacation" tick on db.d.o search conditions
> > you get a list of developers which are "on vacation" too.
>
> Thanks for finding a security hole.
I'm not really sure about this issue, i can't demonstrate that the
users displayed in the search results are really "On vacation".
Try, for example, to select one country, mark "On vacation" and test if
the developers displayed are really marked as "On vacation".
--
bye,
- Nacho
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
