How To Get Free 30Gigs.Com Email Account (Without Invitation)

By Angsuman Chakraborty, Gaea News Network
Tuesday, November 29, 2005

30Gigs.com is an invitation-only email service which offers a whopping 30 Gigabytes of storage for your email. As a reference GMail currently offers around 2.5 GB storage. Unfortunately they poorly implemented the registration interface which can be trivially compromised as shown below.

Here is a proof-of-concept form which allows you to get a 30Gig email account without an invitation, thanks to Retard from Cyber-Crimes via Ch0de.

First Name:
Last Name:
Desired Email Address: @30gigs.com
Choose a Password:
Re-enter Password:
Secondary Email (required): Note: You may want to use disposable email addresses for safety.
Country:

Note: The data you provide above is directly transmitted to 30gigs.com website. Your data doesn’t pass through our servers.

A trivial fix requires a single line of code. A simple check for referrer should do the trick. So don’t be surprised if the form above suddenly fails to work. It is simply a proof-of-concept.

I am very curious to see how soon they plug this hole as a measure of their responsiveness.
Filed under: Computer Security, Headline News, How To, Tech Note, Web, Web Services
Discuss Bellow
Discussion

polly
June 5, 2010: 4:25 pm

that´s bullshit.
YOUR VIEW POINT
NAME : (REQUIRED)
MAIL : (REQUIRED)
will not be displayed
WEBSITE : (OPTIONAL)
YOUR
COMMENT :
 
Submit