UPDATE:
It seems that it might get hard to remember all the accounts you have registered or have access to, or how they were spelled, etc...
by sending the command MYACCESS to ToriBank, you will get a list of accounts that you are owner or manager for.
------------------------------------------------------
Originally Posted by
marcus
Excuse my random testings... I'm just trying several different things. (though some seem pretty silly, I would like to test it nonetheless)
Thanks, i was watching from the console while you were testing, hehe. I don't think you tested the obvious of WITHDRAW -12341234 though :P
Originally Posted by
marcus
EDIT: Okay so finally some progress. I was able to determine an account name through random guessing and an error message. Naturally if you receive the message "You do not have access to this account." It indeed does exist. So basically all I have done was figure out an account name(aside from mine). Not very impressive at all considering most will be plastered in clan "bank" threads anyways...
yeah, i was thinking of that while coding. I don't consider it to be a security-issue that it's easy to find out that an account exists. On the other side, i fucking hate the windows-style ambiguous error messages like "Website could not load. Either your network cable is unplugged, the web server is down, the page was 404, you do not have access, the DNS server didn't respond, aliens intercepted your HTTP request, or your computer is not switched on. You should call tech support who will hate you for it".
Originally Posted by
marcus
EDIT: False names/toribank messages don't seem to work to try and trick it. This is probably because it is case + character sensitive.
Usernames are only matched 100%, obviously
Originally Posted by
marcus
EDIT: Withdrawing more funds than available doesn't work. (this one seemed kind of obvious but worth a try)
First check i added, i believe.
Originally Posted by
marcus
EDIT: Oh cool... the account name I figured out has no money on it.. 
Eh, what?
Anyway, thanks for testing.
Last edited by Jarmund; Nov 28, 2011 at 11:20 PM.