Topic Drift from TT - Exploits and Coding

[Redregon]

Not to be nitpicky or anything, but I haven't done anything listed in this document. Please try to read things you quote more carefully; this is several times in a single page of posts now.

fair enough, but, see, i'm not trying to pretend that i'm doing this for the good of the site. i'm just doing it because i'm bored and easily amused.

p.s. section 2c applies as the information that is being denied is crossing state boundaries and even national boundaries... same with section 5ai, ii and iii... and section 7 could apply if you're somehow edging for a position on staff, but you've said you're not so that could be considered moot. please re-read what you're discounting.

 

[Eevee]

fair enough, but, see, i'm not trying to pretend that i'm doing this for the good of the site.

Again, I'm not doing this for "the good of" anyone at all. This is not about people to me; people are just necessarily related. This is about technology.

p.s. section 2c applies as the information that is being denied is crossing state boundaries and even national boundaries... same with section 5ai, ii and iii... and section 7 could apply if you're somehow edging for a position on staff, but you've said you're not so that could be considered moot.

2C does not apply, because I didn't obtain any information.
5A does not apply, because it requires that 5B also apply, and those are all about causing financial or physical harm.
7 would not apply, because a position on staff is not a thing of value.

 

[Redregon]

Again, I'm not doing this for "the good of" anyone at all. This is not about people to me; people are just necessarily related. This is about technology.

you offered your assistance, you were turned down. what about this doesn't jive with you? this is a site for furry porn, not like it going down would be the end of the world.

and really, if a site having bad code bugs you to the level that you say it does, you need therapy... because obsessing over something like you have been doing can't be healthy or productive.

basically, i'm suggesting you shut the hell up. because, well, you offered help, they refused... then you hacked the site... and you now expect the site owner to even listen to you? shit, son... you've got one hell of a case of unwarranted self importance.

 

[Xenke]

Redregon, let me give you my thought about why you should be shutting up.

Although like you I don't fully understand why Eevee want to help the site so much, I do like him hanging around and trying to help because he's at least polite (at least publicly) about it. He's not like you, or other people, who seem to be only interested in bitching every time something goes wrong.

Honestly, I don't see why you have such a big problem that he's trying to work with the staff. You jealous or something?

 

[Eevee]

My objections are about things FA is doing, and things FA is vulnerable to. My actions and motives remain entirely irrelevant. Redragon, you're the only one here trying to make me important.

 

[Redregon]

Redregon, let me give you my thought about why you should be shutting up.

Although like you I don't fully understand why Eevee want to help the site so much, I do like him hanging around and trying to help because he's at least polite (at least publicly) about it. He's not like you, or other people, who seem to be only interested in bitching every time something goes wrong.

Honestly, I don't see why you have such a big problem that he's trying to work with the staff. You jealous or something?

Hahahah, no. i just like poking things with sticks.

don't like it? tough shit.

 

[Pi]

this is a site for furry porn, not like it going down would be the end of the world.

No, it isn't. It's the central gathering point for a large portion of the furry community. Trivializing it as "just a porn site" is asinine.

and really, if a site having bad code bugs you to the level that you say it does, you need therapy... because obsessing over something like you have been doing can't be healthy or productive.

Excuse me? First you act like someone gave you a Juris Doctor and admittance to the Bar, and now you're acting like you've got a Ph.D. in psychology?

basically, i'm suggesting you shut the hell up. because, well, you offered help, they refused... then you hacked the site... and you now expect the site owner to even listen to you? shit, son... you've got one hell of a case of unwarranted self importance.

"just shut up and go away xd nobody should listen to you because you hacked!!" -- you

Do I even need to go into what's wrong with this?

 

[Xenke]

Hahahah, no. i just like poking things with sticks.

don't like it? tough shit.

You mean like how I poked weed threads with sticks? :roll:

 

[Redregon]

No, it isn't. It's the central gathering point for a large portion of the furry community. Trivializing it as "just a porn site" is asinine.


Excuse me? First you act like someone gave you a Juris Doctor and admittance to the Bar, and now you're acting like you've got a Ph.D. in psychology?


"just shut up and go away xd nobody should listen to you because you hacked!!" -- you

Do I even need to go into what's wrong with this?

go for it... not like i'll give a shit what some neckbeard with an axe to grind has to say. you're just words on a screen and you have no value to me. so say whatever the hell you want. it's not like you have any impact in my life... you are basically a non-entity in my books and what you do to try and "pwn" me is rather useless because i really just don't care.

hell, you could whine about how your life sucks like some little emo fag and show pictures of how you're trying to an hero and i'd care just about as much as i do for the life of a fruitfly. am i insane or somehow lesser because of that? well, if you want to think so... but that doesn't change the fact that you are just words on a screen to me.

 

[Redregon]

You mean like how I poked weed threads with sticks? :roll:

fair enough... but apples aren't oranges. a furry website and it's life on the web isn't nearly close to comparing to one's freedom to choose what they do with their body.

 

[dinosaurdammit]

fair enough... but apples aren't oranges. a furry website and it's life on the web isn't nearly close to comparing to one's freedom to choose what they do with their body.

Apples and oranges are both fruits, that grow on trees.

 

[Redregon]

Apples and oranges are both fruits, that grow on trees.

Wait... oh, I C wut you did there... ¬_¬

 

[Aden]

Redregon, this thread now consists almost entirely of you trying to attack the character of specific people instead of its intended topic. This is your warning - cut it out.

Also, you self-censored the word "faggot". What the hell?

 

[Redregon]

Redregon, this thread now consists almost entirely of you trying to attack the character of specific people instead of its intended topic. This is your warning - cut it out.

okiee dokie.

Also, you self-censored the word "faggot". What the hell?

problem? Admin?

 

[Freehaven]

It still amazes me just how complacent and half-assed the top administration and the coder(s) are when it comes to FA. How is this site still up?

 

[Jashwa]

It still amazes me just how complacent and half-assed the top administration and the coder(s) are when it comes to FA. How is this site still up?

The willpower of furries wanting to upload their horribly drawn porn.

It's FA's secret.

 

[Arshes Nei]

It still amazes me just how complacent and half-assed the top administration and the coder(s) are when it comes to FA. How is this site still up?

This is why you should , or rather the site has more shared responsibilities. More one is in power without some checks it leads to negligence or corruption. No matter how well meaning this started.

 

[Plague Wolfen]

I just wanted to say, staff is not a hive mind.

How dare staff not act in a Borg-like, collective manner!

Sorry. Reading comment after comment of back and forth accusations between staff and members as if it's going to do anything other than cause more netz-raging, warranted a silly moment.

 

[Accountability]

So apparently the old trick of <Doing X> to cause anyone who visits the site to get their profile wiped still works. Arcturus claims to have wiped quite a few in the last few hours by putting this on the Yiffyleaks site.

This is one of those things that is not hard to fix, but is ignored for whatever reason (probably just people being lazy) and in the end it's the community that suffers.

 

[Arshes Nei]

Hi Accountability, (keep in mind I haven't seen Eevee's list so it may be in there).

Was this reported to what staff members before someone went vindictive and used the exploit. Also when were you aware this was reported to those members?

 

[Accountability]

Hi Accountability, (keep in mind I haven't seen Eevee's list so it may be in there).

Was this reported to what staff members before someone went vindictive and used the exploit. Also when were you aware this was reported to those members?

This is included on Eevee's original Livejournal list from October as "★★☆ An attacker can trick a user into changing that user's profile text and metadata."

 

[Arshes Nei]

Thanks, and I see the course of the thread that he didn't give specifics or more accurately our coders, didn't ask for specifics on how to create and fix?

Seems most of these attacks are though the use of "mangled bbcode" tags where one can embed? Is this correct?

 

[Eevee]

Thanks, and I see the course of the thread that he didn't give specifics or more accurately our coders, didn't ask for specifics on how to create and fix?

Correct. Summercat was the first to ask for specifics last week, and he now has them.

Seems most of these attacks are though the use of "mangled bbcode" tags where one can embed? Is this correct?

No, it has nothing to do with bbcode, and there's nothing mangled about it. It's perfectly legitimate HTML and HTTP requests. CSRF is a confused deputy problem.

 

[LizardKing]

So apparently the old trick of <Doing X> to cause anyone who visits the site to get their profile wiped still works. Arcturus claims to have wiped quite a few in the last few hours by putting this on the Yiffyleaks site.

This is one of those things that is not hard to fix, but is ignored for whatever reason (probably just people being lazy) and in the end it's the community that suffers.

I think I've just seen what you're referring to. I'm shocked that it works.

Edit: Just tried it with something I wrote in notepad in about 20 seconds and it worked fine. Oh jesus.

Edit edit: Think I got NoScript to block it.

 

[Arshes Nei]

Thanks for the explanation Eevee, I appreciate it.

Of course I wonder how long this takes for the staff in charge of coding to get this issue fixed.