Sunday, November 30, 2008

Hacking Online Voting Sites

This is a hilarious article about some students who automated repeated votes for their schools on the Victoria's Secret contest to see who would be the first school with their name on the collegiate ladies' undergarments. This is not something that is hard at all to do, if it's anything like the other schemes I've seen. For instance, when ESPN hosted an online vote for the Heisman trophy that was actually going to factor the public opinion into who received the trophy, I thought about writing an automated Perl script to vote for D-Mac over and over (it's BS that they denied him the Heisman as a sophomore, based on the fact that he was a sophomore, and then gave Timmy Tebow the Heisman as a sophomore no problem). The ESPN site basically just checked a cookie that it set in your browser to make sure you couldn't vote multiple times, and the manual solution was as simple as deleting your browser cache. It would have been trivial to automate this with a program that accepted and used cookies temporarily for each vote and then dropped them. I guess none of the big tech schools' students that the article mentioned have any interest in football though, because that type of attack never occurred. For the right to be the first school with their name on some panties though...

No comments: