• Fur Affinity Forums are governed by Fur Affinity's Rules and Policies. Links and additional information can be accessed in the Site Information Forum.

Topic Drift from TT - Exploits and Coding

Redregon

Banned
Banned
Not to be nitpicky or anything, but I haven't done anything listed in this document. Please try to read things you quote more carefully; this is several times in a single page of posts now.

fair enough, but, see, i'm not trying to pretend that i'm doing this for the good of the site. i'm just doing it because i'm bored and easily amused.

p.s. section 2c applies as the information that is being denied is crossing state boundaries and even national boundaries... same with section 5ai, ii and iii... and section 7 could apply if you're somehow edging for a position on staff, but you've said you're not so that could be considered moot. please re-read what you're discounting.
 

Eevee

Banned
Banned
fair enough, but, see, i'm not trying to pretend that i'm doing this for the good of the site.
Again, I'm not doing this for "the good of" anyone at all. This is not about people to me; people are just necessarily related. This is about technology.

p.s. section 2c applies as the information that is being denied is crossing state boundaries and even national boundaries... same with section 5ai, ii and iii... and section 7 could apply if you're somehow edging for a position on staff, but you've said you're not so that could be considered moot.
2C does not apply, because I didn't obtain any information.
5A does not apply, because it requires that 5B also apply, and those are all about causing financial or physical harm.
7 would not apply, because a position on staff is not a thing of value.
 

Redregon

Banned
Banned
Again, I'm not doing this for "the good of" anyone at all. This is not about people to me; people are just necessarily related. This is about technology.

you offered your assistance, you were turned down. what about this doesn't jive with you? this is a site for furry porn, not like it going down would be the end of the world.

and really, if a site having bad code bugs you to the level that you say it does, you need therapy... because obsessing over something like you have been doing can't be healthy or productive.

basically, i'm suggesting you shut the hell up. because, well, you offered help, they refused... then you hacked the site... and you now expect the site owner to even listen to you? shit, son... you've got one hell of a case of unwarranted self importance.
 

Xenke

Member
Redregon, let me give you my thought about why you should be shutting up.

Although like you I don't fully understand why Eevee want to help the site so much, I do like him hanging around and trying to help because he's at least polite (at least publicly) about it. He's not like you, or other people, who seem to be only interested in bitching every time something goes wrong.

Honestly, I don't see why you have such a big problem that he's trying to work with the staff. You jealous or something?
 

Eevee

Banned
Banned
My objections are about things FA is doing, and things FA is vulnerable to. My actions and motives remain entirely irrelevant. Redragon, you're the only one here trying to make me important.
 

Redregon

Banned
Banned
Redregon, let me give you my thought about why you should be shutting up.

Although like you I don't fully understand why Eevee want to help the site so much, I do like him hanging around and trying to help because he's at least polite (at least publicly) about it. He's not like you, or other people, who seem to be only interested in bitching every time something goes wrong.

Honestly, I don't see why you have such a big problem that he's trying to work with the staff. You jealous or something?

Hahahah, no. i just like poking things with sticks.

don't like it? tough shit.
 

Pi

Member
this is a site for furry porn, not like it going down would be the end of the world.
No, it isn't. It's the central gathering point for a large portion of the furry community. Trivializing it as "just a porn site" is asinine.

and really, if a site having bad code bugs you to the level that you say it does, you need therapy... because obsessing over something like you have been doing can't be healthy or productive.
Excuse me? First you act like someone gave you a Juris Doctor and admittance to the Bar, and now you're acting like you've got a Ph.D. in psychology?

basically, i'm suggesting you shut the hell up. because, well, you offered help, they refused... then you hacked the site... and you now expect the site owner to even listen to you? shit, son... you've got one hell of a case of unwarranted self importance.
"just shut up and go away xd nobody should listen to you because you hacked!!" -- you

Do I even need to go into what's wrong with this?
 

Redregon

Banned
Banned
No, it isn't. It's the central gathering point for a large portion of the furry community. Trivializing it as "just a porn site" is asinine.


Excuse me? First you act like someone gave you a Juris Doctor and admittance to the Bar, and now you're acting like you've got a Ph.D. in psychology?


"just shut up and go away xd nobody should listen to you because you hacked!!" -- you

Do I even need to go into what's wrong with this?

go for it... not like i'll give a shit what some neckbeard with an axe to grind has to say. you're just words on a screen and you have no value to me. so say whatever the hell you want. it's not like you have any impact in my life... you are basically a non-entity in my books and what you do to try and "pwn" me is rather useless because i really just don't care.

hell, you could whine about how your life sucks like some little emo fag and show pictures of how you're trying to an hero and i'd care just about as much as i do for the life of a fruitfly. am i insane or somehow lesser because of that? well, if you want to think so... but that doesn't change the fact that you are just words on a screen to me. ;)
 
Last edited:

Redregon

Banned
Banned
You mean like how I poked weed threads with sticks? :roll:

fair enough... but apples aren't oranges. a furry website and it's life on the web isn't nearly close to comparing to one's freedom to choose what they do with their body.
 

dinosaurdammit

White Devil
fair enough... but apples aren't oranges. a furry website and it's life on the web isn't nearly close to comparing to one's freedom to choose what they do with their body.

Apples and oranges are both fruits, that grow on trees.
 

Aden

Play from your ****ing HEART
Redregon, this thread now consists almost entirely of you trying to attack the character of specific people instead of its intended topic. This is your warning - cut it out.

Also, you self-censored the word "faggot". What the hell?
 
Last edited:

Freehaven

Dammit.
It still amazes me just how complacent and half-assed the top administration and the coder(s) are when it comes to FA. How is this site still up?
 

Jashwa

Member
It still amazes me just how complacent and half-assed the top administration and the coder(s) are when it comes to FA. How is this site still up?
The willpower of furries wanting to upload their horribly drawn porn.

It's FA's secret.
 

Arshes Nei

Masticates in Public
It still amazes me just how complacent and half-assed the top administration and the coder(s) are when it comes to FA. How is this site still up?

This is why you should , or rather the site has more shared responsibilities. More one is in power without some checks it leads to negligence or corruption. No matter how well meaning this started.
 

Accountability

Enthusiastic Downloader
So apparently the old trick of <Doing X> to cause anyone who visits the site to get their profile wiped still works. Arcturus claims to have wiped quite a few in the last few hours by putting this on the Yiffyleaks site.

This is one of those things that is not hard to fix, but is ignored for whatever reason (probably just people being lazy) and in the end it's the community that suffers.
 
Last edited by a moderator:

Arshes Nei

Masticates in Public
Hi Accountability, (keep in mind I haven't seen Eevee's list so it may be in there).

Was this reported to what staff members before someone went vindictive and used the exploit. Also when were you aware this was reported to those members?
 

Accountability

Enthusiastic Downloader
Hi Accountability, (keep in mind I haven't seen Eevee's list so it may be in there).

Was this reported to what staff members before someone went vindictive and used the exploit. Also when were you aware this was reported to those members?

This is included on Eevee's original Livejournal list from October as "★★☆ An attacker can trick a user into changing that user's profile text and metadata."
 

Arshes Nei

Masticates in Public
Thanks, and I see the course of the thread that he didn't give specifics or more accurately our coders, didn't ask for specifics on how to create and fix?

Seems most of these attacks are though the use of "mangled bbcode" tags where one can embed? Is this correct?
 

Eevee

Banned
Banned
Thanks, and I see the course of the thread that he didn't give specifics or more accurately our coders, didn't ask for specifics on how to create and fix?
Correct. Summercat was the first to ask for specifics last week, and he now has them.

Seems most of these attacks are though the use of "mangled bbcode" tags where one can embed? Is this correct?
No, it has nothing to do with bbcode, and there's nothing mangled about it. It's perfectly legitimate HTML and HTTP requests. CSRF is a confused deputy problem.
 
L

LizardKing

Guest
So apparently the old trick of <Doing X> to cause anyone who visits the site to get their profile wiped still works. Arcturus claims to have wiped quite a few in the last few hours by putting this on the Yiffyleaks site.

This is one of those things that is not hard to fix, but is ignored for whatever reason (probably just people being lazy) and in the end it's the community that suffers.

I think I've just seen what you're referring to. I'm shocked that it works.

Edit: Just tried it with something I wrote in notepad in about 20 seconds and it worked fine. Oh jesus.

Edit edit: Think I got NoScript to block it.
 
Last edited by a moderator:

Arshes Nei

Masticates in Public
Thanks for the explanation Eevee, I appreciate it.

Of course I wonder how long this takes for the staff in charge of coding to get this issue fixed.
 
Top