Signaling 37signals... please wake up
I have been a fan of 37signals, their babies- Rails, basecamp, writeboard are just amazing apps. But I have a true story to share today, I am upset about a fact I discovered an hour ago. 37signals, unknowingly is playing with trust of many companies. writeboard.com is a tool used by many people to collaborate and communicate. if you are using it then I am sure , after reading this blog post, you will give it a thought before you rely on any third party tool like writeboard. So let me share my story of discovery...
I was browsing and doing a google search casually, for finding info about few people I met this week. I suddenly reached to a link pointing to 123.writeboard.com/(something) , This page asks for authentication! but Oooops google cache for the same page doesn't! unfortunately it presented me html of a whole communication of a team regarding a product development of a well known company. That says that google has cached those urls... It opened every thing the team did for the project... (poor team, they blindly believed that their ideas are safe!). I found that google has cached these set of urls very recently...
if you want to test this...
follow these steps:
1.) go to google or gigablast and search for site:123.writeboard.com or click here
2.) go to cached page of any result following url pattern similar to 123.writeboard.com/6412f6bf670e164bc/feed/c010fedd01c01896eb0fedd01adc8e
3.) You should see some content as html source... just create wakeup37.html and copy this content, save and open in your browser
I was browsing and doing a google search casually, for finding info about few people I met this week. I suddenly reached to a link pointing to 123.writeboard.com/(something) , This page asks for authentication! but Oooops google cache for the same page doesn't! unfortunately it presented me html of a whole communication of a team regarding a product development of a well known company. That says that google has cached those urls... It opened every thing the team did for the project... (poor team, they blindly believed that their ideas are safe!). I found that google has cached these set of urls very recently...
if you want to test this...
follow these steps:
1.) go to google or gigablast and search for site:123.writeboard.com or click here
2.) go to cached page of any result following url pattern similar to 123.writeboard.com/6412f6bf670e164bc/feed/c010fedd01c01896eb0fedd01adc8e
3.) You should see some content as html source... just create wakeup37.html and copy this content, save and open in your browser
Wake up 37signals!
'regards
Abhishek Parolkar
MD5 Signature: 2f:4a:7b:56:54:e7:4e:c9:1b:c1:b2:e8:ea:59:c7:d2
website: http://abhishek.parolkar.com
email: abhishek@parolkar.com
===================================================
"Life is not a journey to the grave with the intention to arrive safely in a pretty and well-preserved body, but rather to skid in broadside, thoroughly used up, totally worn out, and loudly proclaiming: Wow!! What a ride!"
===================================================
Labels: 37signals, hack, writeboard
