Interesting glitch in my employers network

greenspun.com : LUSENET : TimeBomb 2000 (Y2000) : One Thread

We have a feature called webmail, that allows us to retieve email from home. The address is http://webmail.XXXXXX.com

I normally check my email on the weekends, so I am quite familiar how it works. On entering the page, a form comes up asking for username and password. Or not, at least this morning. What came up was our intranet homepage. And the url in the address bar was weird... http://webmail.XXXXXX.com\/
It is not supposed to be accessible from outside, as (without a password) a lot of proprietary informartion is available, such as technical notes on our products, bug lists, QA information etc. Nothing earth shattering, except maybe to our competitors. However, there are other areas that are more sensitive, especially payroll, but they need a password. I am authorized for some areas and reports, and with the password was able to access them.

I'm not trying to make this seem like a big deal, or as a y2k failure, I just thought someone may find it of interest.

-- rather not say (nope@uh-uh..com), January 02, 2000

Answers

Oh, and yes, I did leave a message for our network administrator, who was not in his office at 6:45 his time.

-- rather not say (nope@uh-uh..com), January 02, 2000.

Too bad you don't have the home phone number of someone in charge, a lot of systems were powered down or restricted from internet usage over the weekend to protect them from all of the virus' that were supposed to go out over the rollover. Too bad you don't have an emergency contact number for them.

-- Cherri (sams@brigadoon.com), January 02, 2000.

I guess giving out the phone numbers wasn't in my companies contigency plans Cherri. Oh wait a minute.... what contingency plans???

-- rather not say (nope@uh-uh..com), January 02, 2000.

Cherri; Have you seen any evidence of these virii that were supposed to be released. I have seen very little to indicate there were anywhere near as many as the feebs said were on the way.

-- Michael Erskine (Osiris@urbanna.net), January 02, 2000.

Moderation questions? read the FAQ