June 19, 2006
ESPN 360 Flaw
ESPN 360 is a website that when you are using an ISP that is supported by ESPN 360 you can download the software and then watch any sporting event that they broadcast.
There is a flaw in their code that allows you to change the URL and it doesn’t matter what ISP you are using. Vasken and I thought we would have to spoof an IP address to see if that would work or try and connect to my apt computer which is on Adelphia, but no, we just need to have some knowledge of web programming.
This is the code that their site takes you to if you are not on an ISP that is supported
http://static.espn.go.com/broadband/ebb2/360SiteRedesignStaging/index9.html?affiliate=nonaffiliate
However, Vasken and I discovered just by being educated programmers that if we passed affiliate instead of nonaffiliate that it may skip through and let you access the program to download. The Following is the code you need to enter in a browser (PC, not MAC)
http://static.espn.go.com/broadband/ebb2/360SiteRedesignStaging/index9.html?affiliate=affiliate
I am blogging about this now and then I am going to send ESPN a notice to let them know of the flaw.
UPDATE: I realized after that there is a problem when you download the application that it still requires you to contact your ISP, but if you use the Web Version, it works just fine – Timothy
