« So Long Now ? | Main | Ways to spend your SSIA part 1 »

Include your county in Monopoly

I'm not sure that everybody is playing fair with Hasbro's Monopoly All-Ireland edition website which allows you to vote for your country to be included in the all-ireland edition.. Leitrim at #1? You gotta be kidding me.. Could be the extreme security which can only be cracked using expensive and unavailable applications like wireshark


POST /asp/submitVote.asp HTTP/1.1

Host: www.monopoly.ie

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5

Accept-Language: en-us,en;q=0.5

Accept-Encoding: gzip,deflate

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7

Keep-Alive: 300

Connection: keep-alive

Cookie: ASPSESSIONIDCCCTSTDB=CMELBCDCJFIECKHFLNNABJBI

Content-type: application/x-www-form-urlencoded

Content-length: 124

optin=0&ageId=2&votingReason=blah&countryCode=2&cityName=Waterford&cityId=79&email=me%40mydomain%2Ecom&name=Shane%20DempseyHTTP/1.1 100 Continue

Server: Microsoft-IIS/5.0

Date: Fri, 27 Apr 2007 13:46:17 GMT

X-Powered-By: ASP.NET

HTTP/1.1 200 OK

Server: Microsoft-IIS/5.0

Date: Fri, 27 Apr 2007 13:46:23 GMT

X-Powered-By: ASP.NET

Content-Length: 83

Content-Type: text/html

Cache-control: private

<?xml version="1.0" encoding="utf-8"?><response><result>success</result></response>
</body>
</html>

Yep, it'd be pretty tricky to script a HTTP post command. Even tricker to fake an email address. Not sure I'm up to it & I certainly wouldn't advocate it. I'm not sure IIS 5.0 would handle the load anyway. Either way when you monitor the voting results it looks a tad suspicious.

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

About

This page contains a single entry from the blog posted on April 27, 2007 2:58 PM.

The previous post in this blog was So Long Now ?.

The next post in this blog is Ways to spend your SSIA part 1.

Many more can be found on the main index page or by looking through the archives.

Powered by
Movable Type 3.33