Seeking feedback on Password Protection via Java/JavaScript ONLY (no cgi)

[Borked Pseudo Mailed]

Seeking feedback on Password Protection via Java/JavaScript ONLY (no cgi):
SEE:

http://online_tools.home.att.net/tools.html

*AND*

http://online_tools.home.att.net/extraCode.htm

Thanks.

[David Dorward]

Re: Seeking feedback on Password Protection via Java/JavaScript ONLY (no cgi)

Borked Pseudo Mailed wrote:[color=blue]
> Seeking feedback on Password Protection via Java/JavaScript ONLY (no cgi):[/color]

Its rubbish. No different from just keeping the URL secret (except it
requires the user to have a JVM installed).

--
David Dorward <http://blog.dorward.me .uk/> <http://dorward.me.uk/>
Home is where the ~/.bashrc is

[Hywel Jenkins]

Re: Seeking feedback on Password Protection via Java/JavaScript ONLY (no cgi)

In article <5f5b576f74bbac 23dedc77ed3d273 6e7@pseudo.bork ed.net>,
nobody@pseudo.b orked.net says...[color=blue]
>
> Seeking feedback on Password Protection via Java/JavaScript ONLY (no cgi):
> SEE:
>
> http://online_tools.home.att.net/tools.html
>
> *AND*
>
> http://online_tools.home.att.net/extraCode.htm[/color]

I must say that I'd thought I'd seen the world's worst web page. Until
two minutes ago, I now realise, I hadn't. Even at 1024x748 it's 29
pages long. I suspect the password thing is equally daft.

--

Hywel

http://kibo.org.uk/

[Randy Webb]

Re: Seeking feedback on Password Protection via Java/JavaScript ONLY(no cgi)

Borked Pseudo Mailed said the following on 10/10/2005 4:43 PM:[color=blue]
> Seeking feedback on Password Protection via Java/JavaScript ONLY (no cgi):
> SEE:
>
> http://online_tools.home.att.net/tools.html
>
> *AND*
>
> http://online_tools.home.att.net/extraCode.htm
>
> Thanks.
>[/color]

complete and utter rubbish - both pages.
--
Randy
comp.lang.javas cript FAQ - http://jibbering.com/faq & newsgroup weekly

[Borked Pseudo Mailed]

Re: Seeking feedback on Password Protection via Java/JavaScript ONLY (n cgi)

There is a lot of stuff on http://online_tools.home.att.net/tools.html

I should have said: SEE ***bottom**** of
http://online_tools.home.att.net/tools.html
(since that's where the materials and presentation starts), and
then it continues on http://online_tools.home.att.net/extraCode.htm

Thanks.

Before I wrote:

Seeking feedback on Password Protection via Java/JavaScript ONLY (no cgi):
SEE:

http://online_tools.home.att.net/tools.html

*AND*

http://online_tools.home.att.net/extraCode.htm

Thanks.

[Martin Kurz]

Re: Seeking feedback on Password Protection via Java/JavaScript ONLY(n cgi)

Borked Pseudo Mailed schrieb:[color=blue]
> There is a lot of stuff on http://online_tools.home.att.net/tools.html
>
> I should have said: SEE ***bottom**** of
> http://online_tools.home.att.net/tools.html
> (since that's where the materials and presentation starts), and
> then it continues on http://online_tools.home.att.net/extraCode.htm
>
> Thanks.
>
> Before I wrote:
>
> Seeking feedback on Password Protection via Java/JavaScript ONLY (no cgi):
> SEE:
>
> http://online_tools.home.att.net/tools.html
>
> *AND*
>
> http://online_tools.home.att.net/extraCode.htm
>
> Thanks.[/color]

Well, as allready the others said: That's really one of the worst
"password-protection" i've ever seen. Why? Because there's no
password-protection at all. The pages-URL is only hidden but the page is not
protected. Just go directly to the page with a browser without or deactivated JS
and you're getting the page. Oh, yes, the content is made invisble by CSS
"visibility : hidden" - but all the content is there, CSS can be overwritten in
lot browsers or the page can be saved and changed or you can use a browser
without css or ... You see why that's rubbish?

[Oliver Saunders]

Re: Seeking feedback on Password Protection via Java/JavaScript ONLY(n cgi)

> You see why that's rubbish?

That's nothing.

I had a web development lecturer who gave my class a test on the web,
really easy questions. Anyway it was in a form using JS and no CGI and
the first thing I did went I saw it was to open up the source and looked
at a couple of the arrays that tell you all the correct answers.

When it comes to data security No CGI = No good. You cannot hide the source.

Ollie

[Borked Pseudo Mailed]

Re: Seeking feedback on Password Protection via Java/JavaScript ONLY (n cgi)

Martin Kurz:

I put all the security measures into effect now in the live sample,
so you can understand and I made a couple other improvements.
Try it again!! I double dog dare yah!!

see bottom: http://home.att.net/~online_tools/tools.html

and http://home.att.net/~online_tools/extraCode.htm again now

AND RUN THE SAMPLE AND TRY TO OUTSMART IT!! It will outsmart you.


I believe this will now satisfy all parties
as well as my online tests (with encrypted anwsers on-board) satisfy
users of that throughout the lan). Also check out the world famous
Universal Test Scorer near the top of

http://home.att.net/~online_tools/tools.html