Lensman re: thread u just closed - GoFuckYourself.com

George Bush Jr. · 10-04-2003, 11:10 PM

I noticed you just shutoff the document function.

I was just about to explain how if you add the onmouseout to that feature you could return it back to normal and it wouldnt be so annoying , but i still think it prob best not to allow it.. I was also explaining how anyone can steal someone cookie using that function, Now that you removed that function you cant do it that way but there are several more holes that still would allow someone to steal anyones cookie, or other data.

Normally misc data doesnt matter much but when a malicious person gets a hold of it but in a forum where the users can be tracked its much more important.

I think the most obvious flaw that somehow in the future will have to be fixed , even though everyone will complain is NO FLASH !! you could embed the same functions in flash and theres no way for the script to check if its in the flash or not.

I already know the flaw works its just a matter of fixing it ..

One possible solution is approved sigs only that data is kept on a GFY server not on remote servers.

Maybe sigs only after 1000 posts ?

Ban html code all together

( i dont think that one will go over to well )

10-04-2003, 11:12 PM

sig after 1000 posts
very interesting!

Fletch XXX · 10-04-2003, 11:12 PM

<img src=http://www.apple.com/hotnews/articles/2002/10/waynekramer/images/mc5.jpg border="1">

FEW KNOW

grogan · 10-04-2003, 11:12 PM

lmao

flash getting banned on gfy....

hyper · 10-04-2003, 11:12 PM

this isnt a democracy

lensman does as lensman does.

live with it just like everyone else does

MattO · 10-04-2003, 11:13 PM

Sometimes today when I open topics I keep getting a restricted box from Shining Force Central that asks for my username and password. As much as I love Moogie I have never ever gone to a Shining Force site from this computer. Is it just me for some inexplicable reason, or is this happening to anybody else?

MC5

Lensman · 10-04-2003, 11:16 PM

I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

George Bush Jr. · 10-04-2003, 11:17 PM

Quote:

Originally posted by grogan
lmao

flash getting banned on gfy....

Well its either that or someone could post everyones cookie and ip in GFY and see how fast flash gets banned

apoklyptk · 10-04-2003, 11:18 PM

Quote:

I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

*push*

George Bush Jr. · 10-04-2003, 11:20 PM

Quote:

Originally posted by Lensman
I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

I wouldnt hesitate on that ,seriously people are already using their flash sigs to troll for emails and using the autofill function to get your info . ( dont ask me what they intend to do with it. but scan through the current flash sigs and crack it open and look inside. Harvesting emails from users)

MattO · 10-04-2003, 11:22 PM

Quote:

Originally posted by Lensman
I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

Perhaps it would be alright if you gave access to HTML and such only to those with a certain high post counts, or some sort of total post and time on the board formula... anything to keep newly created "characters" from exploiting anything

GFED · 10-04-2003, 11:23 PM

Quote:

Originally posted by George Bush Jr.

I wouldnt hesitate on that ,seriously people are already using their flash sigs to troll for emails and using the autofill function to get your info . ( dont ask me what they intend to do with it. but scan through the current flash sigs and crack it open and look inside. Harvesting emails from users)

Interesting... got any names?

10-04-2003, 11:23 PM

Quote:

Originally posted by MattO

Perhaps it would be alright if you gave access to HTML and such only to those with a certain high post counts, or some sort of total post and time on the board formula... anything to keep newly created "characters" from exploiting anything

good idea

George Bush Jr. · 10-04-2003, 11:25 PM

Quote:

Originally posted by MattO

Perhaps it would be alright if you gave access to HTML and such only to those with a certain high post counts, or some sort of total post and time on the board formula... anything to keep newly created "characters" from exploiting anything

Im not sure how that would work in terms of code , but it sounds like the best solution.

Still remote hosted flash = big trouble period

JDog · 10-04-2003, 11:41 PM

Quote:

Originally posted by George Bush Jr.

Im not sure how that would work in terms of code , but it sounds like the best solution.

Still remote hosted flash = big trouble period

But it would only have to be respected people that aren't jackasses!

jDoG

George Bush Jr. · 10-04-2003, 11:50 PM

Quote:

Originally posted by JDog

But it would only have to be respected people that aren't jackasses!

jDoG

I have known alot of respectable looking thieves before.

The html code is one thing , but when your talking about whoring out GFY users email , for profit thats a whole other story.

Wouldnt it be nice to buy a list of GFY users emails addy's. Corresponding gfy username and locations right from the get go .

With flash its easy enough to harvest that information without anyone knowing. ( well very hard to know anyways )

Chris · 10-04-2003, 11:54 PM

yah ... sorry bout that lens but i wasnt the one to oringal do it.....

TheFLY · 10-04-2003, 11:59 PM

No flash until you have 5k posts

then approved and hosted on Adult.com servers...

I just turned off Flash in my browser... I'm not using MSIE, but I really don't have time to keep up with the latest Flash exploits

George Bush Jr. · 10-05-2003, 12:28 AM

Quote:

Originally posted by TheFLY
No flash until you have 5k posts then approved and hosted on Adult.com servers...

I just turned off Flash in my browser... I'm not using MSIE, but I really don't have time to keep up with the latest Flash exploits

This would prob just about do it and you could leave html code on , i think you have it about covered .

Approved flash hosted on adult.com servers only , and you would have to supply the full flash project to look thru , because you could protect the swf file and still embed some tricky shit that wouldnt be very easy to detect.

You could allow other users to use a flash sig only if they use already approved hosted program sigs ( i.e. paid sig spots ).

Or just dump sigs and be done with them . they arent a good idea , they make forums get filled with junk because people just want to get the sig in. If you have something usefull to say or promote you should have to do it by hand each time. That way if you still feel like promoting stuff you could keep a text of your sig and post it along with stuff you say . Not just when your saying "cool" or "yes" or "haha" . It makes the forums load slow as crap. Go use any other version of this same forum and it loads FAST.

TheFLY · 10-05-2003, 01:08 AM

Quote:

Originally posted by George Bush Jr.

This would prob just about do it and you could leave html code on , i think you have it about covered .

Approved flash hosted on adult.com servers only , and you would have to supply the full flash project to look thru , because you could protect the swf file and still embed some tricky shit that wouldnt be very easy to detect.

You could allow other users to use a flash sig only if they use already approved hosted program sigs ( i.e. paid sig spots ).

Or just dump sigs and be done with them . they arent a good idea , they make forums get filled with junk because people just want to get the sig in. If you have something usefull to say or promote you should have to do it by hand each time. That way if you still feel like promoting stuff you could keep a text of your sig and post it along with stuff you say . Not just when your saying "cool" or "yes" or "haha" . It makes the forums load slow as crap. Go use any other version of this same forum and it loads FAST.

Sigs are 99.9% of the reason anyone posts here...

TheFLY · 10-05-2003, 01:12 AM

There's got to be a dumbed-down Flash version our there free of stupid exploits...?

If we go back to animated .GIF's I won't really be sad though...

theking · 10-05-2003, 01:24 AM

Quote:

Originally posted by Lensman
I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

Just today when I loaded a page from GFY...my screen began to jerk all around...and very shortly my system told me that I was low on memory. I checked my systems resources and learned that memory was being ate up by leaps and bounds. I am not sharp enough to know what or how this was caused but maybe you know. BTW I had to reboot to correct the problem.

10-04-2003, 11:10 PM	#1
George Bush Jr. So Fucking Banned Join Date: Oct 2003 Location: The White House Posts: 150	Lensman re: thread u just closed I noticed you just shutoff the document function. I was just about to explain how if you add the onmouseout to that feature you could return it back to normal and it wouldnt be so annoying , but i still think it prob best not to allow it.. I was also explaining how anyone can steal someone cookie using that function, Now that you removed that function you cant do it that way but there are several more holes that still would allow someone to steal anyones cookie, or other data. Normally misc data doesnt matter much but when a malicious person gets a hold of it but in a forum where the users can be tracked its much more important. I think the most obvious flaw that somehow in the future will have to be fixed , even though everyone will complain is NO FLASH !! you could embed the same functions in flash and theres no way for the script to check if its in the flash or not. I already know the flaw works its just a matter of fixing it .. One possible solution is approved sigs only that data is kept on a GFY server not on remote servers. Maybe sigs only after 1000 posts ? Ban html code all together ( i dont think that one will go over to well )

10-04-2003, 11:12 PM	#3
Fletch XXX GFY HALL OF FAME DAMMIT!!! Join Date: Jan 2002 Location: that 504 Posts: 60,840	<img src=http://www.apple.com/hotnews/articles/2002/10/waynekramer/images/mc5.jpg border="1"> FEW KNOW __________________ Want an Android App for your tube, membership, or free site? Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

10-04-2003, 11:12 PM	#5
hyper Confirmed User Join Date: Mar 2002 Location: Mass Ass Posts: 5,294	this isnt a democracy lensman does as lensman does. live with it just like everyone else does __________________

10-04-2003, 11:54 PM	#17
Chris Too lazy to set a custom title Industry Role: Join Date: May 2003 Location: icq: 71462500 Skype: Jupzchris Posts: 27,880	yah ... sorry bout that lens but i wasnt the one to oringal do it..... __________________ [email protected]

10-04-2003, 11:12 PM	#2
buddyjuf Guest Posts: n/a	sig after 1000 posts very interesting!

10-04-2003, 11:12 PM	#4
grogan So Fucking Banned Join Date: Feb 2001 Location: CHICAGO Posts: 2,284	lmao flash getting banned on gfy....

10-04-2003, 11:13 PM	#6
MattO The O is for Oohhh Join Date: Feb 2003 Location: AUSTIN TEJAS Posts: 10,861	Sometimes today when I open topics I keep getting a restricted box from Shining Force Central that asks for my username and password. As much as I love Moogie I have never ever gone to a Shining Force site from this computer. Is it just me for some inexplicable reason, or is this happening to anybody else? MC5

10-04-2003, 11:16 PM	#7
Lensman GFY Chaperone Join Date: Jan 2001 Location: Adult.com Posts: 9,846	I'm about one step from banning all html and making everyone use vb code because of all the jackasses trying to exploit html.

10-04-2003, 11:59 PM	#18
TheFLY So Fucking Banned Join Date: Jan 2001 Location: http://www.thefly.net/ --- Quit your job and live off steady traffic. Posts: 11,856	No flash until you have 5k posts then approved and hosted on Adult.com servers... I just turned off Flash in my browser... I'm not using MSIE, but I really don't have time to keep up with the latest Flash exploits

10-05-2003, 01:12 AM	#21
TheFLY So Fucking Banned Join Date: Jan 2001 Location: http://www.thefly.net/ --- Quit your job and live off steady traffic. Posts: 11,856	There's got to be a dumbed-down Flash version our there free of stupid exploits...? If we go back to animated .GIF's I won't really be sad though...