On 8/24/06, Timwi timwi@gmx.net wrote:
As long as such pageview mix-up is extremely rare, there is next to no chance for anyone to exploit it maliciously, but it *is* possible, and it becomes more possible is this happens more frequently.
Ok, brainstorming, I guess someone could constantly attempt to pageview a page that required administrative privileges (like unblocking themselves), and hope by sheer chance that an admin ended up getting their pageview? Interestingly there aren't really any privacy implications that I'm aware of, as there are almost no pages for which *read* access is restricted to certain users.
Steve