Amazon used to use CF - Allaire was proud to have them as a client about two
years ago - since then they are tried asp,cgi and other such nonsense!
James
"You're a big man, but you're out of shape. With me it's a full time job.
Now behave yourself."
"Get
___
- -Original Message-
From: John Grubb [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 14, 2000 2:11 PM
To: CF-Talk
Subject: RE: Amazon using CF
Yes, they do, among other languages. I have seen ".cfm" files on
their site.
John
- ---
PROTECTED]
To: "CF-Talk" [EMAIL PROTECTED]
Sent: Sunday, November 05, 2000 8:06 PM
Subject: Re: Amazon using CF
Do you think that the largest online e-tailor wants people to know what
language and app servers they use? That would aid hackers quite nicely,
huh?
Yep. One bug rece
I'm pretty sure Amazon has its own scripting language. I know Excite does.
In fact there are a few high-end, high-volume sites that do that.
-Original Message-
From: Greg Wolfinger [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 14, 2000 9:32 AM
To: CF-Talk
Subject: Amazon using CF
BEA System's WebLogic
It's a java app server. Somewhere in the $20 grand per processor range.
Of course, it does allow for the personalization you see on Amazon's site.
- Original Message -
From: "Greg Wolfinger" [EMAIL PROTECTED]
To: "CF-Talk" [EMAIL PROTECTED]
Sent: Thursday, December
From what I understood before they got secretive about their technology, a lot of it
is built in Perl.
At 12:32 PM 12/14/00 -0500, Greg Wolfinger wrote:
Hey Guys:
I was looking at some amazon.com source and notice quite a bit of whitespace,
resembling CF output. Does anyone know if Amazon
Well I would then like to get my hands on their parser :)
Raise some hell, haha.
Greg
- Original Message -
From: "Dylan Bromby" [EMAIL PROTECTED]
To: "CF-Talk" [EMAIL PROTECTED]
Sent: Thursday, December 14, 2000 1:35 PM
Subject: RE: Amazon using CF
I'm pretty sur
I have heard that they use their own language? and Oracle db's
Shane Witbeck
-- Original Message --
From: "Greg Wolfinger" [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Thu, 14 Dec 2000 12:32:21 -0500
Hey Guys:
I was looking at some amazon.com
iginal Message-
From: John Grubb [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 14, 2000 2:11 PM
To: CF-Talk
Subject: RE: Amazon using CF
Yes, they do, among other languages. I have seen ".cfm" files on
their site.
John
- -Original Message-
From: Greg Wolfinger [mailto:[EM
CF-Talk" [EMAIL PROTECTED]
Sent: Thursday, December 14, 2000 1:53 PM
Subject: RE: Amazon using CF
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I'll give $5 to the person who can a .cfm file on Amazon.com.
Seriously...
cfif listfindnocase(AllaireClientlist, "amazon")
cfset You_t
Do you think that the largest online e-tailor wants people to know what
language and app servers they use? That would aid hackers quite nicely,
huh?
Yep. One bug recently found in IIS+CF give source code of any *.cfm. AFAIK
many websites on CF can be broken very easily then.
Regards,
ire
Email : [EMAIL PROTECTED]
ICQ UIN : 3679482
"My ally is the Force, and a powerful ally it is." - Yoda
-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 14, 2000 7:57 PM
To: CF-Talk
Subject: RE: Amazon using CF
Outside of
Yep. One bug recently found in IIS+CF give source code of any
*.cfm. AFAIK many websites on CF can be broken very easily then.
That's not a CF bug, it's an IIS bug. The script reading exploits will work
with any scripting language used on IIS.
Dave Watts, CTO, Fig Leaf Software
day, December 14, 2000 1:53 PM
Subject: RE: Amazon using CF
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I'll give $5 to the person who can a .cfm file on Amazon.com.
Seriously...
cfif listfindnocase(AllaireClientlist, "amazon")
cfset You_think_they_might_advertise_that = &
that only dead fish swim with
the stream." -- Malcolm Muggeridge
___
- -Original Message-
From: John Grubb [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 14, 2000 2:11 PM
To: CF-Talk
Subject: RE: Amazon using CF
Yes, they do,
Its just a mapping, once removed the vulnerability is gone.
From: Dave Watts [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Subject: RE: Amazon using CF
Date: Thu, 14 Dec 2000 21:12:21 -0500
Yep. One bug recently found in IIS+CF give source code of any
*.cfm
minutes to convert the
site from Cold Fusion to their own system.
Jim
- Original Message -
From: "Aaron Johnson" [EMAIL PROTECTED]
To: "CF-Talk" [EMAIL PROTECTED]
Sent: Thursday, December 14, 2000 1:53 PM
Subject: RE: Amazon using CF
-BEGIN PGP SIGNED MESSA
Aaron Johnson" [EMAIL PROTECTED]
To: "CF-Talk" [EMAIL PROTECTED]
Sent: Thursday, December 14, 2000 1:53 PM
Subject: RE: Amazon using CF
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I'll give $5 to the person who can a .cfm file on Amazon.com.
Seriously...
I first heard about it last spring and apparently it had been in the works
for some time.
- Steve
-Original Message-
From: Jim McAtee [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 14, 2000 11:52 PM
To: CF-Talk
Subject: Re: Amazon using CF
If I remember correctly
19 matches
Mail list logo
