: Emptied of expectation. Relax. (tinyjo) wrote in lj_dev,
2003-01-29 15:48:00

Emptied of expectation. Relax.
tinyjo
lj_dev
2003-01-29 15:48:00

Security hole?

I spotted this when thinking about a support request. If a user chooses to hide their "Friends Of" list, it is still possible for paid users to access it via the directory by searching for Has Friend : User lists <username> as a friend. E.g. , http://www.livejournal.com/userinfo.bml?user=tinyjo&mode=full and http://www.livejournal.com/directory.bml?fr_user=tinyjo . Is this behaviour by design? If so, should there be a disclaimer in the edit info page about this?

"Invalid password" when calling login method over XML-RPC

A week or two ago my LJBackup client started being unable to login - I didn't change anything (I think!), but now I always get an "Invalid password"…
cl-journal livejournal client

Hey everyone, I'd like to present a livejournal client that I wrote to fulfill my needs but maybe there are other people that can find it…
SessionGenerate and ljloggedin

Are there any information after release 86 and changes in cookies scheme to use sessiongenerate? It returns ljsession key, but this key is not enough…

Post a new comment
Error

Anonymous comments are disabled in this journal
Anonymously

Log in

default userpic

Your reply will be screened

Your IP address will be recorded

Preview comment

Help
14 comments

Post a new comment
14 comments

"Invalid password" when calling login method over XML-RPC

A week or two ago my LJBackup client started being unable to login - I didn't change anything (I think!), but now I always get an "Invalid password"…
cl-journal livejournal client

Hey everyone, I'd like to present a livejournal client that I wrote to fulfill my needs but maybe there are other people that can find it…
SessionGenerate and ljloggedin

Are there any information after release 86 and changes in cookies scheme to use sessiongenerate? It returns ljsession key, but this key is not enough…

Security hole?

"Invalid password" when calling login method over XML-RPC

cl-journal livejournal client

SessionGenerate and ljloggedin

Error

"Invalid password" when calling login method over XML-RPC

cl-journal livejournal client

SessionGenerate and ljloggedin