SecurityRatty: Spot the Fed or Spot the Pony

This is cache of http://holisticinfosec.blogspot.com/2008/04/spot-fed-or-spot-pony-cia-xss.html. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

Spot the Fed or Spot the Pony - CIA XSS

2008-04-16 12:04:00 by Russ McRee in HolisticInfoSec.org

I can't resist. Giorgio Maone posted this here, having seen it on the Wired blog.
The repros say it all, and mind you, this "opportunity" has been public for days, yet the CIA hasn't fixed or disabled it. As Wired alluded, methinks the Cyber Security 'Manhattan Project' hasn't quite reached fruition yet.
For you fans of the "alqa-ida pony club" go here, but if you'd prefer to read about wunderkind Chertoff's latest spew try this. Both execute in the context of cia.gov. Sad, to say the least. Hopefully, these won't work much longer.
Screenshots if you'd prefer.