Amazon.com say "Hack me"

Hobbes

<font face="Verdana, Arial" size="2">
*snip* you might be interested in entering the Ultimate Hacking
Exposed Contest that's happening right now at Amazon.com. Check out
all the details here:

http://www.amazon.com/exec/obidos/tg/feature/-/134656/ref=hc_ebg_1

Amazon.com, Osborne/McGraw-Hill, and Foundstone, Inc., have
developed a security-breach scenario for you to solve. If you are
security-savvy and can spot hacker attacks, this is your chance to
show your stuff. Winners will be enrolled for free in Foundstone's
"Ultimate Hacking: Hands On" course--a total value of $3,500.

You might also be interested in this great collection of hacking
and network-security books from Amazon.com:

http://www.amazon.com/exec/obidos/tg/feature/-/137719/ref=hc_ebg_2

Check out the Ultimate Hacking Exposed Contest and get ready to
footprint, scan, and enumerate! Better hurry, though--contest ends
March 1, 2001. (See below for more details.)

*snip*

The fine print:

No purchase necessary to enter. Void where prohibited. Contest runs
from 12:01 a.m. PST on January 31, 2001, through 11:59 p.m. PST on
March 1, 2001. Legal residents of U.S. age 18 and over eligible to
enter.

For complete official rules and details on how to enter the contest,
visit:
http://www.amazon.com/exec/obidos/tg/feature/-/135983

</font>

satchmo

Looks like a thinly-veiled attempt by Amazon to sell that "Hacking Exposed" book.

As for the challenge, that "GET /global.asa+.htr" in the log sticks out like a sore thumb. Yet another security hole in IIS, apply a patch or remove .htr script mapping. Hardly as tricky a challenge as Amazon would have us believe.

ObeyGiant

One thing I've never understood about these types of competitions..

"If you are security-savvy and can spot hacker attacks, this is your chance to show your stuff. Winners will be enrolled for free in Foundstone's 'Ultimate Hacking: Hands On' course--a total value of $3,500"

Why give the WINNER this prize? Surely the losers would need the education more?