full-disclosure - Re: HTTP 404 - Content-Type: image/gif

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20061120113718.8DAE.SHAUN@shaunc.com>
Date: Mon, 20 Nov 2006 11:48:09 -0600
From: Shaun <shaun@...unc.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: HTTP 404 - Content-Type: image/gif

On Mon, 20 Nov 2006 13:00:00 -0300
"Joshua Tagnore" <joshua.tagnore@...il.com> wrote:

> mafo:/home/joshua/$ nc XXXXX 80 -v -v
> GET http://www.XXXXXX.com/YYYYYY HTTP/1.0
> 
> 
> HTTP/1.0 404 Not Found
> Date: Fri, 17 Nov 2006 13:40:47 GMT
> Content-Length: 0
> Content-Type: image/gif
> Server: Apache/2.0.54 (Unix)

By chance, does this server belong to an image host like imageshack or
flickr?

If the majority of their 404s are requests for gif/jpg/png, resulting from
<img> tags on remote sites, it might make sense for their 404s to return
a zero-length image for everything but .html. That way the browsers are
at least getting a reasonable content-type (I'm not suggesting that
image/gif is the best content-type for a missing .png, for instance; but
it's marginally better than text/html).

-s

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/