Heh their site search was failing to create sessions yesterday..
But I can understand.
Allaire is moving their entire company to a new building so
lets cut thema lil slack ehh, I know the two are not really
related.. but moving servers and stuff and keeping any kind of
web presence is cool. :)
Jeremy
-----Original Message-----
From: Steve Bernard [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 12, 2000 11:03 AM
To: [EMAIL PROTECTED]
Subject: RE: You know what would be really cool?
It is truly a sad state of affairs isn't it? This sort of thing has been
happening on a regular basis since Allaire first started hosting a website.
All three of their main components, Corporate, Forums, and Beta sites, have
gone down or produced errors that really make them look bad. The two general
types that I have seen the most, and that speak volumes about their
infrastructure/administration in my opinion, are related to performance/load
and database management. Ironically enough, these are two of tenants of the
Allaire Performance Tuning class, optimizing your code and your database.
Another problem that this exposes is Allaire's attention to detail and
security. You can learn a lot about a system by getting such error messages.
It may seem innocent enough but from this error message you know:
1) Using IIS
2) .. therefore, using NT
3) Web root is on D:, seperate from the system root
4) Exact path to the customtags directory
5) Template name
6) Exact line of offending code
7) 'CustomTagsV65' may indicate that they have multiple versions in one
tree. This may provide further opportunity
if the system is breached.
8) Allaire doesn't monitor it's servers effectively
9) Allaire doesn't seem to take it's web presence seriously enough even
though the product it sells is made for
developing high-end, robust, data-driven, web sites (enought buzz words
there?).
All this provides is information, not vulnerabilities, but, it is a definite
start in profiling the system, and all without having to send a single
suspicious packet their way. Anyone who has spent time profiling systems
will understand this. So if Allaire is this shoddy in protecting/maintaining
their corporate site what's going on with the areas of the site that manage
customer information?
Steve
p.s. I don't have anything against Allaire, I'm just calling it like I see
it.
> -----Original Message-----
> From: Sean Renet [mailto:[EMAIL PROTECTED]]
>
> I think it would be really cool if you went to Allaire's website, searched
> for something and didn't get this:
>
> Error Diagnostic Information
> Error occurred in tag CFSEARCH
>
> Collection failed to open: AllaireWeb6SiteSearch
>
>
> The error occurred while processing an element with a general
> identifier of (CFSEARCH), occupying document position (28:1) to (31:57) in
> the template file
> D:\WWWROOT\ALLAIREWEB65\CUSTOMTAGSV65\ALLAIREWEB\SITESEARCH\SITESE
> ARCH.CFM.
>
>
> Date/Time: 07/11/00 22:55:58
> Browser: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
> Remote Address: 63.203.119.82
> HTTP Referer: http://www.allaire.com/search/index.cfm
>
>
>
> How do these guys expect to have people buy into this language when thier
> own site is constantly breaking?
----------------------------------------------------------------------------
--
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
