June 19, 2006

ESPN 360 Flaw

Posted at: 8:59 am by Timothy Haroutunian
Categories: Entertainment and News, Rants and Randomness, Sports and Leisure, Tech and Web

ESPN 360 is a website that when you are using an ISP that is supported by ESPN 360 you can download the software and then watch any sporting event that they broadcast.

There is a flaw in their code that allows you to change the URL and it doesn’t matter what ISP you are using. Vasken and I thought we would have to spoof an IP address to see if that would work or try and connect to my apt computer which is on Adelphia, but no, we just need to have some knowledge of web programming.

This is the code that their site takes you to if you are not on an ISP that is supported
http://static.espn.go.com/broadband/ebb2/360SiteRedesignStaging/index9.html?affiliate=nonaffiliate

However, Vasken and I discovered just by being educated programmers that if we passed affiliate instead of nonaffiliate that it may skip through and let you access the program to download. The Following is the code you need to enter in a browser (PC, not MAC)
http://static.espn.go.com/broadband/ebb2/360SiteRedesignStaging/index9.html?affiliate=affiliate

I am blogging about this now and then I am going to send ESPN a notice to let them know of the flaw.

UPDATE: I realized after that there is a problem when you download the application that it still requires you to contact your ISP, but if you use the Web Version, it works just fine - Timothy

adelphia, cable provider, espn, espn 360, espn 360 flaw, isp, sports, technology, web programming, world cup

Text Link Ads

Post A Comment

    38 Responses to “ESPN 360 Flaw”

    1. Avatardavid
      Posted: Jun 19th, 2006 at 4:02 pm
      1

      has anyone come up on something like this for nascar trackpass?
    2. AvatarTimothy Haroutunian
      Posted: Jun 19th, 2006 at 4:04 pm
      2
      Author Comment

      Not that I know of, but I will take a look and let you know if I find something
    3. AvatarColby
      Posted: Jun 19th, 2006 at 5:34 pm
      3

      Educated programmers finding something else to do rather than what they are supposed to at work. Awesome!! Interesting that is was that easy. Usually flaws like that are caught before release. How long until they fix it, haha.
    4. AvatarVasken
      Posted: Jun 19th, 2006 at 5:50 pm
      4

      In response to David’s question, I would wager there is no way to similarly obtain access to NASCAR’s Trackpass. The reason for this is that Trackpass, as a subscription service, requires its users to create a username and password unique to the site. ESPN360.com does nothing of the sort–it is a free service, you can’t pay for it, you just have to have the right ISP. It’s one thing to trick a web page into thinking your browser/operating system is something its not–it’s a heck of a lot more difficult to convince a server you have an account on it when you don’t.

      On the plus side, now you can watch all of ESPN360’s NASCAR coverage online:)
    5. pingback pingback:
      Posted: Jun 20th, 2006 at 8:43 am
      5
      Armenian Eagle » ESPN 360 Flaw Fixed

      [...] I wrote an article yesterday called ESPN 360 Flaw which was a very big success, but last night ESPN found their flaw in the code and not only fixed it but launched a whole new Flash Based site. [...]
    6. Avatardavid
      Posted: Jun 20th, 2006 at 10:47 am
      6

      thanks for the prompt responses.
    7. Avatargraver1
      Posted: Jun 21st, 2006 at 10:18 am
      7

      Is there any chance you could not tell ESPN about the flaw till after the World Cup. Please, I’d like to watch it online when I’m not at home.
    8. AvatarJessica
      Posted: Jun 21st, 2006 at 10:22 am
      8

      wait, they fixed it? i think it’s still working…
    9. AvatarTimothy Haroutunian
      Posted: Jun 21st, 2006 at 10:23 am
      9
      Author Comment

      I never told ESPN, however, I found the flaw when there was a temp page up for the new redesign. I am going to be working on finding away around this new Flash site in hopes I can manipulate it and gain access. I will post if I find something.

      The comment from jessica: If you have one of the providers than it will work without any problems, let me know if it does work even if you dont have a supported ISP.
    10. Avatareduardo
      Posted: Jun 21st, 2006 at 11:03 am
      10

      It works here my college (definitely not a supported ISP!)

      -e
    11. AvatarTimothy Haroutunian
      Posted: Jun 21st, 2006 at 2:17 pm
      11
      Author Comment

      You were using the link that I provided in this article?
    12. Avatarcharls
      Posted: Jun 21st, 2006 at 2:39 pm
      12

      It doesn’t work. Both links go to the same “your ISP doesn’t support ESPN 360″ thing……………..

      Any ideas :)

      thanks
    13. AvatarTimothy Haroutunian
      Posted: Jun 21st, 2006 at 2:43 pm
      13
      Author Comment

      What I am going to do is take a “system screen shot” at my apt which I have Adelphia and then do another “system screen shot” at work which is not a supported ISP and see what information changes. Then try to manipulate the data and see if I can find a way around it. I’ll post what info I find.
    14. AvatarstOOsh
      Posted: Jun 21st, 2006 at 4:00 pm
      14

      thanks for the tip, i have Comcast (not supported) and this is working beatifully!

      it’s pretty funny how simple this workaround is.

      i got confused at first because your link took me right back to the “view tour” screen with the “your isp does not support” message. i was confused for a few minutes, kept trying, then a light bulb went off in my head and i did it again while holding CTRL to unblock the 360 viewer pop-up! duh. it doesnt work in firefox, as far as i can tell.
    15. AvatarTimothy Haroutunian
      Posted: Jun 21st, 2006 at 4:09 pm
      15
      Author Comment

      so apparently stOOsh is right and it does load while holding CTRL to unblock the 360 viewer pop-up. It is very weird, but it doesnt work in Firefox and that is why I had issues figuring that out because I love Firefox. Props to StOOsh
    16. Avatardavid
      Posted: Jun 21st, 2006 at 9:51 pm
      16

      whats the tip i have comcast and it says that my isp doesnt support it
    17. AvatarTimothy Haroutunian
      Posted: Jun 22nd, 2006 at 7:06 am
      17
      Author Comment

      While using Internet Explorer on a Windows PC, hold down the control key while clicking the link that is in the article above. This should launch another window which is the web application of ESPN 360
    18. AvatarJoe
      Posted: Jun 22nd, 2006 at 10:37 am
      18

      I think they fixed it,…everything things to work fine,..but when you get there the playlist is empty.

      is anyone watching the US-Ghana game using this flaw?

      joe
    19. Avatarchristian
      Posted: Jun 22nd, 2006 at 10:59 am
      19

      i have the same problem as joe.. everything seems to work fine but no video will load.. the 360 screen comes up and says loading/buffering but no video?

      any ideas?
    20. AvatarJoe
      Posted: Jun 22nd, 2006 at 11:01 am
      20

      does it show “US-ghana” on the playlist?

      all i see is the sample video

      Joe
    21. Avatarchristian
      Posted: Jun 22nd, 2006 at 11:09 am
      21

      all i see is a video called “the new espn360″ … but even that doesnt load
    22. Avatargraver1
      Posted: Jun 22nd, 2006 at 1:51 pm
      22

      I’m seeing the same problem as Christian is seeing. Anyway around this?!?
    23. AvatarTimothy Haroutunian
      Posted: Jun 22nd, 2006 at 1:54 pm
      23
      Author Comment

      I am working on trying to establish what is causing that, but I can not seem to find it. I will get back to you
    24. Avatargraver1
      Posted: Jun 22nd, 2006 at 2:17 pm
      24

      Thank you
    25. Avatarcharls
      Posted: Jun 22nd, 2006 at 2:34 pm
      25

      Same problem here!!!
      It worked fine yesterday, but today it won’t connect. No playlist, buffering, and nothing.
      Any ideas? Maybe they took it down :)
    26. AvatarTimothy Haroutunian
      Posted: Jun 22nd, 2006 at 2:36 pm
      26
      Author Comment

      That is a possibility, however, I am not 100%. But for now, I am going to go on that assumption.
    27. pingback pingback:
      Posted: Jun 22nd, 2006 at 8:11 pm
      27
      Armenian Eagle » USA Falls to Ghana in World Cup

      [...] For those of you who saw my post on ESPN 360 flaw, most of you were able to watch the game on-line. However, if you were not able to watch it, here is the rundown Haminu Draman opened the scoring for the Black Stars following a blunder by Claudio Reyna in the 22nd minute, before Clint Dempsey leveled the scores for in the 43rd. [...]
    28. Avatarsome guy
      Posted: Jun 23rd, 2006 at 2:52 pm
      28

      So, the workaround I found was to use the URL for the stream itself, like:

      http://espnevent1.espn.com.edgesuite.net/FIFA_June23_Ukraine.asx

      Just replace date and country. So far it’s been working for me. Dunno how long it will last. Otherwise, I’ll go back to sopcast.
    29. Avatarchristian
      Posted: Jun 26th, 2006 at 4:35 pm
      29

      ESPN 360 is doing a free view or something.. Went on today and they were showing the match live.. just one click from the front page.. no login needed

      Thank you ESPN.. It shouldn’t be this hard to see/listen to the World Cup. They should have had it on there for free from the beginning.
    30. Avatardianne
      Posted: Jul 1st, 2006 at 3:28 pm
      30

      Very interesting & professional site. You done great work.
    31. AvatarMarian
      Posted: Aug 11th, 2006 at 9:23 am
      31

      Please help me.

      I cannot see in Holland my favourite sport: Tennis. The ATP Masters like this one in Toronto or next week in Cincinatti are shown in Sport1 but I cannot afford it. I have downloaded TVAnts but they only show ESPN but I never see tennis. Maybe because tennis is shown in ESPN2 and this channel is not on their list?. Is this because they are only channels from Asia?. PPLive has also ESPN and StarSports but after one hour is not yet anything to be seen.

      Will you please help me? Thanks
      Marian
    32. AvatarNelson
      Posted: Oct 3rd, 2006 at 12:55 am
      32

      Does the workaround for ESPN360 still work? The tip previously mentioned recommended (from IE) holding down CTRL while clicking on the link mentioned above. This is suppose to launch the ESPN web application.

      Any confirmation would be appreciated as there’s a college footbal game I’d like to watch this upcoming weekend and it’s only available on ESPN360 and I have Comcast (which doesn’t carry ESPN360)
    33. AvatarTimothy Haroutunian
      Posted: Oct 3rd, 2006 at 11:48 am
      33
      Author Comment

      I can not guarantee that the workaround is still valid because I have not used it in a while. It works for some people and not others. If it works for you, thats great otherwise I don’t know how else to get around it right now.
    34. pingback pingback:
      Posted: Dec 10th, 2006 at 2:36 am
      34
      Armenian Eagle » 2006 » December » 28

      [...] ESPN 360 Flaw (109) [...]
    35. AvatarSean
      Posted: Jul 26th, 2007 at 3:02 pm
      35

      Has anyone found a new way to get around this? My ISP isn’t supported…
    36. Avatari want 360
      Posted: Jan 19th, 2008 at 4:15 pm
      36

      On my Mac here at work I’m gettiing a page that says I must install Flash Player. Did that and nothign changed. Suggestions?
    37. AvatarMac
      Posted: Jan 24th, 2008 at 9:29 pm
      37

      I have a Macbook Pro and am getting the same Flash Player Installation screen. Bummer, not sure if the workaround is still valid anyhow. Any updates?
    38. pingback pingback:
      Posted: May 21st, 2008 at 5:03 pm
      38
      espn 360

      [...] was a very big …. For those of you who saw my post on espn 360 flaw, most of you were able to …http://armenianeagle.com/2006/06/19/espn-360/ESPN360 Europe : Watch Live US Sports Video Action Online - including …Watch unrivalled live video [...]
    SexyComments by BorkWeb

Leave a Comment



graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.

40,272 total reads, averaging 51 daily
stats powered by bSuite bStat