Thanks for the clarification Pete.  I should have read the original post better.  I was confusing it with another script in which the username and password was specified at configuration time.  You are totally right that if this collects the username and password online then it is a problem.

Thanks,
Carl

On 2/6/06, Peter Whiting <[EMAIL PROTECTED]> wrote:
On Mon, Feb 06, 2006 at 08:56:24AM -0800, Carl Youngblood wrote:

>    I appreciate your concerns Pete, but I don't think that
>    the analogy holds. This script resides on someone's local
>    computer and does not publish the user's username or
>    password anywhere.


based on this comment from the original post:

"The script is set up as a web application (perl CGI). They go
to a form that is hosted on a web site."

I assume the script is not residing on the user's computer -
rather on some external site. If this assumption is correct than
it could be a phishing attack. (For the record, I know Stacey and
am definitely not accusing him of phishing.)

pete
_______________________________________________
Ldsoss mailing list
[email protected]
http://lists.ldsoss.org/mailman/listinfo/ldsoss

Reply via email to