Interweb Chuck Norris infiltrates Netflix, Tivo

Back to the article

Del Merritt

Scarily cool #

Posted Friday 27th March 2009 23:49 GMT

Very slick. NoScript and Adblock were of no help there.

David Wiernicki

Seems like... #

Posted Saturday 28th March 2009 16:57 GMT

...someone should use this to add a Rick Astley documentary to peoples' Netflix queues... Assuming there is one. There's gotta be, right?

lupine

hiring #

Posted Saturday 28th March 2009 16:57 GMT

i wonder if chuck can code...an ideal site admin methinks

Anonymous Coward

Surprise! #

Posted Saturday 28th March 2009 16:57 GMT

Just when I forgot that the web is pants, someone reminded me! Just in the nick of time, too. I was about to trust a load of websites with my naked pictures.

Mark McC

Scary, but it's no Chuck Norris #

Posted Sunday 29th March 2009 00:18 GMT

When someone exploits a vulnerability that steals your passwords, edits your details and finishes off by roundhouse kicking your monitor through a window, then, and only then, will they be entitled to use the Chuck Norris analogy.

Anonymous Coward

Doesnt work for me #

Posted Sunday 29th March 2009 17:35 GMT

I have netflix in my "trusted zone" and of course the demo page is not in my trusted zone, so it doesnt work. So thats what "zones" are for ;)

Anonymous Coward

Oops #

Posted Sunday 29th March 2009 21:21 GMT

Seems I was wrong, the "trusted zones" approach DID NOT protect against this. Oh well.

Anonymous Coward

Just think... #

Posted Monday 30th March 2009 08:49 GMT

...how you could mess with the stats!

And this weeks No 1 film (by popular demand) is: ishtar!

Wortel

Very nice #

Posted Monday 30th March 2009 08:49 GMT

Now that's some serious inventiveness. Well done on him, and now we'll soon see what's needed to plug the holes properly.

Anonymous Coward

Interesting. #

Posted Monday 30th March 2009 08:49 GMT

I got a notification that i was not in the US.

Does anyone know if it works across browser instances ?

Elmer Phud

@ Mark McC #

Posted Monday 30th March 2009 13:49 GMT

"When someone exploits a vulnerability that steals your passwords, edits your detail"

You missed out "just with his teeth".

Glyn Kennington

GET and POST #

Posted Monday 30th March 2009 13:56 GMT

Those demonstrations have to submit the cross-site requests as HTTP GET, because they're images and redirects (which happen automatically). But the requests being made are state-changing, so they should be POSTs (requiring user interaction). How would a check in the website's server-side form processing for GET vs POST (or for the HTTP referrer, for that matter) inconvenience the user?

Colin Millar