-
(just now)
I will redo the test --- only that it has been recent that I have made
a standing on this issue. Adam4adam about a month ago said they
released a new version. It would take one of those events to fix this.
it is not fixed. -
(just now)
I am telling you the truth in these issues --- so adam4adam is opened
to the fact that any page of adam4adam can be stolen out of a cache and
used this way. This can be proved. With your HardDrive version of
adam4adam open.... use a different login member name and login to that
account.
You can do this in two different ways to prove the fact twice over.
One, using the same browser type [ Fifefox ] that you have the open hard drive version [ Firefox ].
Or separate it to two different browsers. This would insure you that this test is accuatate.
Open a window using a different browser and login to a different account and send yourself a
message to the opened from hard crive copy account. What happens?
The alert happens --- DDDDDDDUNT [ close ]
Then Hover over the mailbox(4) --- and the 4th message will have the name of the second login --- exposing the information passing. There is no security in the login of adam4adam. It is strictly a flag that you are online or offline for the active showing indicators -- and has been that status for as long as the code has been in operation. Does that concern you? -
(just now)
Terrence --- I am really recovering --- from a disturbing event in a
series of things. Adam4Adam has a security issue if you are not aware
of it. It is easy to replicate. I do not know if the mobile app has
this issue. I have not tried to hack the code since most of the apps on
mobile devices are under a different OS than running desktop version on
windows. If you want to replicate this, it is easy to show. On a
desktop or an web browser that saves pages with the [ Ctrl-S ] to an
.html file is what you need. On adam4adam, taking any page that has your
Mailbox on top of it.... Save it to your hard drive. Log out. This is
easier to test if you have a second account to log into.... but if you
are heavy email receiving memeber here.... you will see the security
isssue right away.
So the status of your login here is OFF -- OR what does that mean. ? Information from the site about your account should not pass through the closed door/window of data passing to the code. Right? WRONG!
Open your now saved onto a hard-drive .html file of the page -- you are logged out. If you had a count of Mailbox(3) when you saved it.... well it would open and say Mailbox(3) --- that makes since. That is the way Facebook Saved Pages work.
But leaving it open --- the security hole issue. There is closed door. That code is accessing the data on the site -- opened from the hard drive ---- OOPS!
 Unread by you
|
 Unread by recipient
|
Conversations are up to
40 messages
long
*
. Need more? Get VIP Access and conversations are
200 messages
long.
Get VIP Access here
* The oldest messages are deleted from a conversation first
* The oldest messages are deleted from a conversation first
