Wow... the government uses some really dumbass web designers

[NikPreviousAcct]

A contact of mine in the military just emailed me the webpage he was looking at. Instead of copy/pasting the information on the page, he somehow managed to email me the actual .htm that he was looking at.

The page he was looking at is on the GSA website andrequires a secure military login and only a select few at each military base have access to this. GSA is a bridge between government contractors and vendors so that government contractors can request quotes for items that vendors can sell.

When I opened it, it obviously opens a local copy. However, it properly loaded all the images on the page, which means it's pulling the images from online. Great. I clicked the "edit" button image and *gasp* all the links actually *work*. :Q I'm looking at an updated page ON the gsa website WITHOUT logging in, and I'm able to edit the items and quantities that are being requested by the government. :Q

Anybody want to see the military order something crazy? I'd love to see the look on the contracting officer's face when 500 inflatable sex sheep show up at his desk. :laugh:

For what it's worth, I've already notified GSA about the issue so don't bother taking me seriously on changing orders and adding new orders.

 

[FrustratedUser]

LOL

 

I worked for a govt. laboratory, their network was as insecure as I've ever seen.

 

[edmicman]

Maybe its just running client side code, and when you hit submit it would error out?

 

[xirtam]

They probably don't have enough session checking, but hopefully their submit code will provide better validation.

 

[NikPreviousAcct]

It *should* be checking sessions. It should have denied me entrance.

 

[quakefiend420]

Originally posted by: Nik
Anybody want to see the military order something crazy? I'd love to see the look on the contracting officer's face when 500 inflatable sex sheep show up at his desk. :laugh:

bwahahaha...do it!

nah, that would be quite amusing though 😀

 

[SarcasticDwarf]

Originally posted by: quakefiend420

Originally posted by: Nik
Anybody want to see the military order something crazy? I'd love to see the look on the contracting officer's face when 500 inflatable sex sheep show up at his desk. :laugh:

bwahahaha...do it!

nah, that would be quite amusing though 😀

He should order the inflatable women and send them to Iraq.

 

[NikPreviousAcct]

Anyone want a Viper? 😉

 

[xirtam]

That's why I said it doesn't have "enough" session checking. Granted, it's flawed, but we don't know how flawed until you try to buy a Viper.

 

[tami]

Originally posted by: Nik
Anyone want a Viper? 😉

i'll take 3.

 

[DanJ]

Lowest bidders are fun!

 

[TheLonelyPhoenix]

Getting fired from a government job requires roughly the same amount of effort as hanging yourself by your tonsils while singing the Star Spangled Banner.

 

[NikPreviousAcct]

Originally posted by: xirtam
That's why I said it doesn't have "enough" session checking. Granted, it's flawed, but we don't know how flawed until you try to buy a Viper.

Nah, my IP was already logged when I hit the domain. Besides, I don't like federal pound me in the ass prison.

 

[xirtam]

Start small with like toothbrushes or something then.

 

[NikPreviousAcct]

:laugh:

 

[91TTZ]

Originally posted by: Nik
I'm looking at an updated page ON the gsa website WITHOUT logging in, and I'm able to edit the items and quantities that are being requested by the government

For what it's worth, I've already notified GSA about the issue so don't bother taking me seriously on changing orders and adding new orders.

Been nice knowing you.

The way the government works, they'd rather throw someone in jail that exploited their flaws than actually fix the flaws.

 

[TheLonelyPhoenix]

Originally posted by: 91TTZ

Originally posted by: Nik
I'm looking at an updated page ON the gsa website WITHOUT logging in, and I'm able to edit the items and quantities that are being requested by the government

For what it's worth, I've already notified GSA about the issue so don't bother taking me seriously on changing orders and adding new orders.

Been nice knowing you.

The way the government works, they'd rather throw someone in jail that exploited their flaws than actually fix the flaws.

Someone needs to paint a red dot on the forehead of his avatar.

Edit: On a side note, awesome sig quote, Nik. 🙂

 

[NikPreviousAcct]

Originally posted by: 91TTZ

Originally posted by: Nik
I'm looking at an updated page ON the gsa website WITHOUT logging in, and I'm able to edit the items and quantities that are being requested by the government

For what it's worth, I've already notified GSA about the issue so don't bother taking me seriously on changing orders and adding new orders.

Been nice knowing you.

The way the government works, they'd rather throw someone in jail that exploited their flaws than actually fix the flaws.

Yeah, too bad for you that I didn't exploit anything, huh. :roll:

 

[NikPreviousAcct]

Thanks TLP. I couldn't have done it without Drew. 😉