<body><script type="text/javascript"> function setAttributeOnload(object, attribute, val) { if(window.addEventListener) { window.addEventListener("load", function(){ object[attribute] = val; }, false); } else { window.attachEvent('onload', function(){ object[attribute] = val; }); } } </script> <iframe src="http://www.blogger.com/navbar.g?targetBlogID=8998644&amp;blogName=totally+freaked+out%21&amp;publishMode=PUBLISH_MODE_FTP&amp;navbarType=BLACK&amp;layoutType=CLASSIC&amp;homepageUrl=http%3A%2F%2Fwww.jaheen.com%2F&amp;searchRoot=http%3A%2F%2Fblogsearch.google.com%2F" marginwidth="0" marginheight="0" scrolling="no" frameborder="0" height="30px" width="100%" id="navbar-iframe" title="Blogger Navigation and Search"></iframe> <div></div>
Custom Search

discovery by a script kiddie!

Saturday, December 10, 2005


the following is a story i've written based on my imagination.. the events stated in it may not be true and i do not take responsibility for any thing anyone does after readin this.. and KIDS: DO NOT TRY THIS AT HOME! :p

------------------

once upon a time i got bored. i had nothing to do, so i sat down on a chair. somehow a PC happened to be infront of me. i lifted my hands up to reach the keyboard. my fingers started flying above it and my hand moved over to something called a "mouse".


with a few clicks, i logged into the website of our "beloved" telecom company, DHIRAAGU (yes! the Touch Maldives! company who promotes "lesbianism" :p )


all of a sudden, curiosity to view my e-bill statement built inside me and made me log in to the "e-bill" page. as soon as i entered my login details, VOILA! the e-bill statement appeared! thank you so much Dhiraagu! how kind of you to let me view my call details! i can view almost all the details i need abt the calls i've made. whoa! i love Dhiraagu for this! they not only Touch Maldives, but they've touched my heart too! :p


well, the phone bill aint quite low this time either! boo's to our telecom company, Dhiraagu.. the prices are still damn high! anyways, i didnt have much to do after that.. so thought of wasting time until i find something useful to do..


time flew by.. with more clicks for the mouse and more keys being pressed on the keyboard.. i enjoyed every minute i spent that way.. but then.....


i got a SHOCK! a really BIG one! whoa! something unbelievable appeared on my monitor.. i "discovered" something i cudnt believe.. i blinked my eyes to make sure it was the reality! and it was, yeah! damn! i just managed to view someone else's e-bill statement!!! DAMN! this sucks! and i'm not even a hacker! LOL! i'm just a lil' young "script kiddie", curios abt the way things work! :p


i was into total shock! i couldnt believe Dhiraagu being so careless about their customers' privacy! imagine the possibilities this cud lead to? this means ANYONE registered as an e-bill user could view other users' bills.. damn! as a "valued customer" of Dhiraagu, i dont like others watching my e-bill statements..


i hurried to take screenshots of everything i did, so that i have proof with me.. later i rang up Fatty from DigitalSquid, met him in person and showed everything :p in excitement he started running around (oops! that was a lil bit of exaggeration). anyways, i only discovered a lame flaw. now, call me whatever u want! a script kiddie? nerd? lamer? haha i dont give a damn! feel free to flame on me! :p


so Dhiraagu;
dont only improve your services, but do consider customers' privacy and take preventive measures to protect it.. definitely, i dont want my privacy to be lost while i'm paying so much for your services! we need new and improved services at low prices! :p we want our privacy! what we DONT need is a new music tune everytime we call your 123 helpdesk and wait five-minutes for them to answer our calls!!!


------------------


moral of the story: Dhiraagu has once again proved that they still suck! :p

posted by jaheen
1:43 AM

6 Comments:

Anonymous Fatty said...

hey jaaheen,

ur right.. this is pathetic of dhiraagu...

keep up the good work... an thanks for giving us a ring..

Fatty @ digitalsquid

1:55 AM  
Blogger dhon bis said...

cheers jaheen :D hehe looks like it runs in the family eh... i was goin t warn not to let the bug get you, but looks like its too late...good work though...;)

4:40 AM  
Anonymous Anonymous said...

well its not working now. the site itself is down

7:52 PM  
Blogger jaheen said...

:)

yea! dhiraagu has finally taken their ebill site offline! i guess they're working on a fix. too bad i cant view my ebill statements now :(

dhonbis: ballavaa mee aailee kameh ingeythoa! :P

10:10 AM  
Anonymous Faust said...

Jaante' kaley rangalhu.....
Mihaaru mashakah ebill eh nufene yey....
Ehehehe!!
Dhiraagu...poor buggers....
Expose' after Expose'!!!
Mayb they need to hire u lot...Fatty, Jaa, U n a coupla others just to look for loopholes in there system....
I bet u wud find a lot more than they bargained for....
Heheheh
Its all for the better anyways....

..Auf Weidersehen..my frend....
:) Taa!!

4:45 PM  
Anonymous Faust said...

U said: DHIRAAGU (yes! the Touch Maldives! company who promotes "lesbianism" :p )

Im sure u noticed.....tht they r not only promoting girl on girl action....if u try to take ur eyes off o their butts n look at the other "TOUCH" billboards....u wud eerily discover tht they r also promotin GAYS....

Im pleased to say tht Our Beloved Dhiraagu is very thoughtful of Gender Equality....Ehehehe....
i wonder if, in all fairness, they'll start promotin....Bisexuals.....?

hav ta wait n c...
heheheh
Ta :)

5:30 PM  

Post a Comment

<< Home