Lensman re: thread u just closed

[George Bush Jr.]

I noticed you just shutoff the document function.

I was just about to explain how if you add the onmouseout to that feature you could return it back to normal and it wouldnt be so annoying , but i still think it prob best not to allow it.. I was also explaining how anyone can steal someone cookie using that function, Now that you removed that function you cant do it that way but there are several more holes that still would allow someone to steal anyones cookie, or other data.

Normally misc data doesnt matter much but when a malicious person gets a hold of it but in a forum where the users can be tracked its much more important.

I think the most obvious flaw that somehow in the future will have to be fixed , even though everyone will complain is NO FLASH !! you could embed the same functions in flash and theres no way for the script to check if its in the flash or not.

I already know the flaw works its just a matter of fixing it ..

One possible solution is approved sigs only that data is kept on a GFY server not on remote servers.

Maybe sigs only after 1000 posts ?

Ban html code all together ( i dont think that one will go over to well )

sig after 1000 posts
very interesting!

[Fletch XXX]

<img src=http://www.apple.com/hotnews/articles/2002/10/waynekramer/images/mc5.jpg border="1">

FEW KNOW

[grogan]

lmao

flash getting banned on gfy....

[hyper]

this isnt a democracy

lensman does as lensman does.

live with it just like everyone else does

[MattO]

Sometimes today when I open topics I keep getting a restricted box from Shining Force Central that asks for my username and password. As much as I love Moogie I have never ever gone to a Shining Force site from this computer. Is it just me for some inexplicable reason, or is this happening to anybody else?









MC5

[Lensman]

I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

[George Bush Jr.]

Originally posted by grogan
lmao

flash getting banned on gfy....

Well its either that or someone could post everyones cookie and ip in GFY and see how fast flash gets banned

[apoklyptk]

I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

*push*

[George Bush Jr.]

Originally posted by Lensman
I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

I wouldnt hesitate on that ,seriously people are already using their flash sigs to troll for emails and using the autofill function to get your info . ( dont ask me what they intend to do with it. but scan through the current flash sigs and crack it open and look inside. Harvesting emails from users)

[MattO]

Originally posted by Lensman
I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

Perhaps it would be alright if you gave access to HTML and such only to those with a certain high post counts, or some sort of total post and time on the board formula... anything to keep newly created "characters" from exploiting anything

[GFED]

Originally posted by George Bush Jr.


I wouldnt hesitate on that ,seriously people are already using their flash sigs to troll for emails and using the autofill function to get your info . ( dont ask me what they intend to do with it. but scan through the current flash sigs and crack it open and look inside. Harvesting emails from users)

Interesting... got any names?

Originally posted by MattO



Perhaps it would be alright if you gave access to HTML and such only to those with a certain high post counts, or some sort of total post and time on the board formula... anything to keep newly created "characters" from exploiting anything

good idea

[George Bush Jr.]

Originally posted by MattO



Perhaps it would be alright if you gave access to HTML and such only to those with a certain high post counts, or some sort of total post and time on the board formula... anything to keep newly created "characters" from exploiting anything

Im not sure how that would work in terms of code , but it sounds like the best solution.

Still remote hosted flash = big trouble period

[JDog]

Originally posted by George Bush Jr.


Im not sure how that would work in terms of code , but it sounds like the best solution.

Still remote hosted flash = big trouble period

But it would only have to be respected people that aren't jackasses!

jDoG

[George Bush Jr.]

Originally posted by JDog


But it would only have to be respected people that aren't jackasses!

jDoG

I have known alot of respectable looking thieves before.

The html code is one thing , but when your talking about whoring out GFY users email , for profit thats a whole other story.

Wouldnt it be nice to buy a list of GFY users emails addy's. Corresponding gfy username and locations right from the get go .

With flash its easy enough to harvest that information without anyone knowing. ( well very hard to know anyways )

[Chris]

yah ... sorry bout that lens but i wasnt the one to oringal do it.....

[TheFLY]

No flash until you have 5k posts then approved and hosted on Adult.com servers...

I just turned off Flash in my browser... I'm not using MSIE, but I really don't have time to keep up with the latest Flash exploits

[George Bush Jr.]

Originally posted by TheFLY
No flash until you have 5k posts then approved and hosted on Adult.com servers...

I just turned off Flash in my browser... I'm not using MSIE, but I really don't have time to keep up with the latest Flash exploits

This would prob just about do it and you could leave html code on , i think you have it about covered .

Approved flash hosted on adult.com servers only , and you would have to supply the full flash project to look thru , because you could protect the swf file and still embed some tricky shit that wouldnt be very easy to detect.

You could allow other users to use a flash sig only if they use already approved hosted program sigs ( i.e. paid sig spots ).

Or just dump sigs and be done with them . they arent a good idea , they make forums get filled with junk because people just want to get the sig in. If you have something usefull to say or promote you should have to do it by hand each time. That way if you still feel like promoting stuff you could keep a text of your sig and post it along with stuff you say . Not just when your saying "cool" or "yes" or "haha" . It makes the forums load slow as crap. Go use any other version of this same forum and it loads FAST.

[TheFLY]

Originally posted by George Bush Jr.


This would prob just about do it and you could leave html code on , i think you have it about covered .

Approved flash hosted on adult.com servers only , and you would have to supply the full flash project to look thru , because you could protect the swf file and still embed some tricky shit that wouldnt be very easy to detect.

You could allow other users to use a flash sig only if they use already approved hosted program sigs ( i.e. paid sig spots ).

Or just dump sigs and be done with them . they arent a good idea , they make forums get filled with junk because people just want to get the sig in. If you have something usefull to say or promote you should have to do it by hand each time. That way if you still feel like promoting stuff you could keep a text of your sig and post it along with stuff you say . Not just when your saying "cool" or "yes" or "haha" . It makes the forums load slow as crap. Go use any other version of this same forum and it loads FAST.

Sigs are 99.9% of the reason anyone posts here...

[TheFLY]

There's got to be a dumbed-down Flash version our there free of stupid exploits...?

If we go back to animated .GIF's I won't really be sad though...

[theking]

Originally posted by Lensman
I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

Just today when I loaded a page from GFY...my screen began to jerk all around...and very shortly my system told me that I was low on memory. I checked my systems resources and learned that memory was being ate up by leaps and bounds. I am not sharp enough to know what or how this was caused but maybe you know. BTW I had to reboot to correct the problem.