Hondaswap.com | Honda Technical & JDM styling Forums

pissedoffsol · 10-14-2005, 09:20 AM

http://it.slashdot.org/it/05/10/14/126233....&tid=95&tid=220

thank you IE, for once again, being a piece of shit.

http://www.betanews.com/article/CrossSite_...pace/1129232391

lol

http://www.livejournal.com/community...ch/150019.html

formby · 10-14-2005, 09:21 AM

i hate bugs

Battle Pope · 10-14-2005, 09:24 AM

it was only a matter of time.

pissedoffsol · 10-14-2005, 09:28 AM

lmao- an interview already!

http://blog.outer-court.com/archive/2005-10-14-n81.html

this is classic

http://namb.la/popular/tech.html

Estorvito · 10-14-2005, 09:29 AM

<div class='quotetop'>QUOTE(formby @ Oct 14 2005, 10:21 AM) Quoted post</div><div class='quotemain'>
i hate bugs
[/b][/quote]

damn thats fucked up....omg....^^ i 2nd that....^^^ [img]style_emoticons/<#EMO_DIR#>/ph34r.gif[/img]

VTECin5th · 10-14-2005, 09:46 AM

Meh,....... my own3rness still works,.. so they haven't fixed much.
Watch out guys [img]style_emoticons/<#EMO_DIR#>/smile.gif[/img]

forgot to mention:
Mine is much more "critical" than adding a friend...

pissedoffsol · 10-14-2005, 10:31 AM

LMAO! someone is making t-shirts. i want one.

http://www.zazzle.com/products/product/pro...8861575&index=1

Battle Pope · 10-14-2005, 10:37 AM

jesus. the schwartz is strong with this one.

pissedoffsol · 10-14-2005, 10:38 AM

this is awesome.

im such a nerd.

no one else seems to care [img]style_emoticons/<#EMO_DIR#>/sad.gif[/img]

Battle Pope · 10-14-2005, 10:40 AM

It's kinda funny that one 19 y/o coder managed to topple the biggest "friendsite" to date.

I'm not nerdy enough to want a t-shirt about it though.

VTECin5th · 10-14-2005, 10:49 AM

I completely respect the amount of code to his script, but i had done something 'bad' to myspace awhile ago, and posted about it awhile ago, it's really not that hard to bother a crappy code infested site.
My methods still work, and i could make a perl $socket worm into mine, to insert it into everyone's profile... the problem is no one would be able to use their myspace unless they used FireFox.
I wouldn't buy a shirt about it, but i respect the way he did it.
Maybe i should automate the mySpace takeover, and go to prison!!!
Fox > Me. [img]style_emoticons/<#EMO_DIR#>/sad.gif[/img]

94CivicSlow · 10-14-2005, 10:56 AM

It wasnt a bug, it was a browser security exploit. Down with IE.

And I found it very interesting... especially this page:

http://namb.la/popular/tech.html

Good Stuff

VTECin5th · 10-14-2005, 10:57 AM

<div class='quotetop'>QUOTE(94CivicSlow @ Oct 14 2005, 10:53 AM) Quoted post</div><div class='quotemain'>
It wasnt a bug, it was a browser security exploit. Down with IE.
[/b][/quote]
In that sense, nothing would be a 'bug' there is an 'explanation' for everything.
Except; why they didn't put a pause button in Mortal Kombat 1 on Sega.
Mine completely relies on the user using Opera or IE.. 80% of mySpacers do.
[img]style_emoticons/<#EMO_DIR#>/ph34r.gif[/img]

...
The thing i do like, is the self contained environment, mine is server driven, only because it was easier, but it's all the same in the end.
A problem.

GSRCRXsi · 10-14-2005, 11:41 AM

what does your code/bug/worm do?

VTECin5th · 10-14-2005, 12:16 PM

uses same theory of XSS, except mine gets account names and passwords.
I have only tried it on 5 people, it worked on 5 people.
My buddy used it on a couple, and it worked on a couple.
Mine is not a worm, but could be if i wanted it to be [img]style_emoticons/<#EMO_DIR#>/smile.gif[/img]

GSRCRXsi · 10-14-2005, 12:22 PM

haha nice

pissedoffsol · 10-14-2005, 12:23 PM

dude, seriously, if you know XSS, why are you poor?

people are paying 150k for that shit...

VTECin5th · 10-14-2005, 12:27 PM

<div class='quotetop'>QUOTE(pissedoffsol @ Oct 14 2005, 12:23 PM) Quoted post</div><div class='quotemain'>
dude, seriously, if you know XSS, why are you poor?

people are paying 150k for that shit...
[/b][/quote]
I'm on my way to get rich, honestly tho, my code looks nothing near that nice.
I just use an existing XSS vulnerability [there are SEVERAL in the site]
do some dancing with my apache, some JS and so on.
It doesn't have all the indexOf.s
I program half-assed i guess, i make things work how i want them to with the minimal amount of work.
Anyone on IE want to test it out?
[img]style_emoticons/<#EMO_DIR#>/tongue.gif[/img]

The advantage to mine is i made it work in messages too.. so i can steal any random person's account and they never know me.
If they are on firefocks, they just see whatever message i was writing like
"Oh sorry i thought you were Ted!"

StealthMode · 10-14-2005, 12:32 PM

<div class='quotetop'>QUOTE(94CivicSlow @ Oct 14 2005, 11:56 AM) Quoted post</div><div class='quotemain'>
And I found it very interesting[/b][/quote]

[img]style_emoticons/<#EMO_DIR#>/blink.gif[/img] [img]style_emoticons/<#EMO_DIR#>/blink.gif[/img] [img]style_emoticons/<#EMO_DIR#>/dry.gif[/img] You guys counfound me. I have NO FUCKING IDEA what any of you are talking about. So I'll just leave this thread and remain in a confused state of mind.

VTECin5th · 10-14-2005, 12:34 PM

<div class='quotetop'>QUOTE(Callidus @ Oct 14 2005, 12:32 PM) Quoted post</div><div class='quotemain'>
<div class='quotetop'>QUOTE(94CivicSlow @ Oct 14 2005, 11:56 AM) Quoted post</div><div class='quotemain'>
And I found it very interesting[/b][/quote]

[img]style_emoticons/<#EMO_DIR#>/blink.gif[/img] [img]style_emoticons/<#EMO_DIR#>/blink.gif[/img] [img]style_emoticons/<#EMO_DIR#>/dry.gif[/img] You guys counfound me. I have NO FUCKING IDEA what any of you are talking about. So I'll just leave this thread and remain in a confused state of mind.
[/b][/quote]
[img]style_emoticons/<#EMO_DIR#>/wave.gif[/img]

pissedoffsol · 10-14-2005, 12:34 PM

indexOf is just an array grabber method....

for example, checking if an @ sign is in an email address string...

if(str_email.indexOf( "@")1 ) { alert("true y0!"); }
else
{alert("doh!")}

VTECin5th · 10-14-2005, 12:37 PM

<div class='quotetop'>QUOTE(pissedoffsol @ Oct 14 2005, 12:34 PM) Quoted post</div><div class='quotemain'>
indexOf is just an array grabber method....

for example, checking if an @ sign is in an email address string...

if(str_email.indexOf( "@")1 ) { alert("true y0!"); }
else
{alert("doh!")}
[/b][/quote]
I understand what they do, ( i rip open nitto1320's game all the time and they are all over in there) and
I'm sure i could learn the indexOf, but i use perl..
whereas
if ($str =~ '@'){
print "yes";
} else {
print "no";
}
and anything i need to figure out i do, i just don't NEED to [img]style_emoticons/<#EMO_DIR#>/smile.gif[/img]

pissedoffsol · 10-14-2005, 12:45 PM

you need to learn OOP y0

VTECin5th · 10-14-2005, 12:49 PM

<div class='quotetop'>QUOTE(pissedoffsol @ Oct 14 2005, 12:45 PM) Quoted post</div><div class='quotemain'>
you need to learn OOP y0
[/b][/quote]
[img]style_emoticons/<#EMO_DIR#>/sad.gif[/img]

E_SolSi · 10-14-2005, 02:05 PM

<div class='quotetop'>QUOTE(94CivicSlow @ Oct 14 2005, 11:56 AM) Quoted post</div><div class='quotemain'>
It wasnt a bug, it was a browser security exploit. Down with IE.

And I found it very interesting... especially this page:

http://namb.la/popular/tech.html

Good Stuff
[/b][/quote]

NAMBLA [img]style_emoticons/<#EMO_DIR#>/wtf_anim.gif[/img]

10-14-2005, 10:49 AM	#11
VTECin5th Senior Member Join Date: Apr 2005 Location: Phoenix Az Age: 24 Posts: 2,188 iTrader: 0 / 0% Rep Power: 41	I completely respect the amount of code to his script, but i had done something 'bad' to myspace awhile ago, and posted about it awhile ago, it's really not that hard to bother a crappy code infested site. My methods still work, and i could make a perl $socket worm into mine, to insert it into everyone's profile... the problem is no one would be able to use their myspace unless they used FireFox. I wouldn't buy a shirt about it, but i respect the way he did it. Maybe i should automate the mySpace takeover, and go to prison!!! Fox > Me. [img]style_emoticons/<#EMO_DIR#>/sad.gif[/img] __________________ k20dc5

10-14-2005, 10:57 AM	#13
VTECin5th Senior Member Join Date: Apr 2005 Location: Phoenix Az Age: 24 Posts: 2,188 iTrader: 0 / 0% Rep Power: 41	<div class='quotetop'>QUOTE(94CivicSlow @ Oct 14 2005, 10:53 AM) Quoted post</div><div class='quotemain'> It wasnt a bug, it was a browser security exploit. Down with IE. [/b][/quote] In that sense, nothing would be a 'bug' there is an 'explanation' for everything. Except; why they didn't put a pause button in Mortal Kombat 1 on Sega. Mine completely relies on the user using Opera or IE.. 80% of mySpacers do. [img]style_emoticons/<#EMO_DIR#>/ph34r.gif[/img] ... The thing i do like, is the self contained environment, mine is server driven, only because it was easier, but it's all the same in the end. A problem. __________________ k20dc5

10-14-2005, 12:27 PM	#18
VTECin5th Senior Member Join Date: Apr 2005 Location: Phoenix Az Age: 24 Posts: 2,188 iTrader: 0 / 0% Rep Power: 41	<div class='quotetop'>QUOTE(pissedoffsol @ Oct 14 2005, 12:23 PM) Quoted post</div><div class='quotemain'> dude, seriously, if you know XSS, why are you poor? people are paying 150k for that shit... [/b][/quote] I'm on my way to get rich, honestly tho, my code looks nothing near that nice. I just use an existing XSS vulnerability [there are SEVERAL in the site] do some dancing with my apache, some JS and so on. It doesn't have all the indexOf.s I program half-assed i guess, i make things work how i want them to with the minimal amount of work. Anyone on IE want to test it out? [img]style_emoticons/<#EMO_DIR#>/tongue.gif[/img] The advantage to mine is i made it work in messages too.. so i can steal any random person's account and they never know me. If they are on firefocks, they just see whatever message i was writing like "Oh sorry i thought you were Ted!" __________________ k20dc5

10-14-2005, 12:37 PM	#22
VTECin5th Senior Member Join Date: Apr 2005 Location: Phoenix Az Age: 24 Posts: 2,188 iTrader: 0 / 0% Rep Power: 41	<div class='quotetop'>QUOTE(pissedoffsol @ Oct 14 2005, 12:34 PM) Quoted post</div><div class='quotemain'> indexOf is just an array grabber method.... for example, checking if an @ sign is in an email address string... if(str_email.indexOf( "@")1 ) { alert("true y0!"); } else {alert("doh!")} [/b][/quote] I understand what they do, ( i rip open nitto1320's game all the time and they are all over in there) and I'm sure i could learn the indexOf, but i use perl.. whereas if ($str =~ '@'){ print "yes"; } else { print "no"; } and anything i need to figure out i do, i just don't NEED to [img]style_emoticons/<#EMO_DIR#>/smile.gif[/img] __________________ k20dc5


Welcome, Guest! Please Register or Login: User Name Password Members have access to more features, better search, and see fewer ads! It's free, what are you waiting for?

10-14-2005, 09:20 AM	#1
pissedoffsol RETIRED Join Date: Sep 2002 Location: Retirement Home Age: 29 Posts: 49,951 iTrader: 2 / 100% Ride: Electric Scooter Blog Entries: 1 Rep Power: 532	http://it.slashdot.org/it/05/10/14/126233....&tid=95&tid=220 thank you IE, for once again, being a piece of shit. http://www.betanews.com/article/CrossSite_...pace/1129232391 lol http://www.livejournal.com/community...ch/150019.html

10-14-2005, 09:21 AM	#2
formby learning in progress Join Date: Feb 2003 Age: 27 Posts: 5,742 iTrader: 4 / 100% Ride: 00' Montero sport, 99' lsv civic Rep Power: 94	i hate bugs

10-14-2005, 09:24 AM	#3
Battle Pope DAT CAT Join Date: Jun 2004 Location: Southern Oregon Coast Age: 24 Posts: 9,634 iTrader: 0 / 0% Ride: 2007 Civic LX Rep Power: 219	it was only a matter of time.

10-14-2005, 09:28 AM	#4
pissedoffsol RETIRED Join Date: Sep 2002 Location: Retirement Home Age: 29 Posts: 49,951 iTrader: 2 / 100% Ride: Electric Scooter Blog Entries: 1 Rep Power: 532	lmao- an interview already! http://blog.outer-court.com/archive/2005-10-14-n81.html this is classic http://namb.la/popular/tech.html

10-14-2005, 09:29 AM	#5
Estorvito Soy Boricua Join Date: Oct 2004 Location: Buffalo NY Posts: 2,028 iTrader: 1 / 100% Ride: BoOsted fodo civic Rep Power: 33	<div class='quotetop'>QUOTE(formby @ Oct 14 2005, 10:21 AM) Quoted post</div><div class='quotemain'> i hate bugs [/b][/quote] damn thats fucked up....omg....^^ i 2nd that....^^^ [img]style_emoticons/<#EMO_DIR#>/ph34r.gif[/img]

10-14-2005, 09:46 AM	#6
VTECin5th Senior Member Join Date: Apr 2005 Location: Phoenix Az Age: 24 Posts: 2,188 iTrader: 0 / 0% Rep Power: 41	Meh,....... my own3rness still works,.. so they haven't fixed much. Watch out guys [img]style_emoticons/<#EMO_DIR#>/smile.gif[/img] forgot to mention: Mine is much more "critical" than adding a friend...

10-14-2005, 10:31 AM	#7
pissedoffsol RETIRED Join Date: Sep 2002 Location: Retirement Home Age: 29 Posts: 49,951 iTrader: 2 / 100% Ride: Electric Scooter Blog Entries: 1 Rep Power: 532	LMAO! someone is making t-shirts. i want one. http://www.zazzle.com/products/product/pro...8861575&index=1

10-14-2005, 10:37 AM	#8
Battle Pope DAT CAT Join Date: Jun 2004 Location: Southern Oregon Coast Age: 24 Posts: 9,634 iTrader: 0 / 0% Ride: 2007 Civic LX Rep Power: 219	jesus. the schwartz is strong with this one.

10-14-2005, 10:38 AM	#9
pissedoffsol RETIRED Join Date: Sep 2002 Location: Retirement Home Age: 29 Posts: 49,951 iTrader: 2 / 100% Ride: Electric Scooter Blog Entries: 1 Rep Power: 532	this is awesome. im such a nerd. no one else seems to care [img]style_emoticons/<#EMO_DIR#>/sad.gif[/img]

10-14-2005, 10:40 AM	#10
Battle Pope DAT CAT Join Date: Jun 2004 Location: Southern Oregon Coast Age: 24 Posts: 9,634 iTrader: 0 / 0% Ride: 2007 Civic LX Rep Power: 219	It's kinda funny that one 19 y/o coder managed to topple the biggest "friendsite" to date. I'm not nerdy enough to want a t-shirt about it though.

10-14-2005, 10:56 AM	#12
94CivicSlow Senior Member Join Date: Nov 2004 Location: B0ST0N Posts: 458 iTrader: 0 / 0% Rep Power: 15	It wasnt a bug, it was a browser security exploit. Down with IE. And I found it very interesting... especially this page: http://namb.la/popular/tech.html Good Stuff

10-14-2005, 11:41 AM	#14
GSRCRXsi Super Moderator Join Date: Nov 2002 Location: MD Age: 25 Posts: 6,660 iTrader: 1 / 100% Rep Power: 95	what does your code/bug/worm do?

10-14-2005, 12:16 PM	#15
VTECin5th Senior Member Join Date: Apr 2005 Location: Phoenix Az Age: 24 Posts: 2,188 iTrader: 0 / 0% Rep Power: 41	uses same theory of XSS, except mine gets account names and passwords. I have only tried it on 5 people, it worked on 5 people. My buddy used it on a couple, and it worked on a couple. Mine is not a worm, but could be if i wanted it to be [img]style_emoticons/<#EMO_DIR#>/smile.gif[/img]

10-14-2005, 12:22 PM	#16
GSRCRXsi Super Moderator Join Date: Nov 2002 Location: MD Age: 25 Posts: 6,660 iTrader: 1 / 100% Rep Power: 95	haha nice

10-14-2005, 12:23 PM	#17
pissedoffsol RETIRED Join Date: Sep 2002 Location: Retirement Home Age: 29 Posts: 49,951 iTrader: 2 / 100% Ride: Electric Scooter Blog Entries: 1 Rep Power: 532	dude, seriously, if you know XSS, why are you poor? people are paying 150k for that shit...

10-14-2005, 12:32 PM	#19
StealthMode Kung Foolin' Join Date: Mar 2003 Location: Thornton, CO Age: 23 Posts: 2,142 iTrader: 0 / 0% Ride: 1990 Integra GS Rep Power: 40	<div class='quotetop'>QUOTE(94CivicSlow @ Oct 14 2005, 11:56 AM) Quoted post</div><div class='quotemain'> And I found it very interesting[/b][/quote] [img]style_emoticons/<#EMO_DIR#>/blink.gif[/img] [img]style_emoticons/<#EMO_DIR#>/blink.gif[/img] [img]style_emoticons/<#EMO_DIR#>/dry.gif[/img] You guys counfound me. I have NO FUCKING IDEA what any of you are talking about. So I'll just leave this thread and remain in a confused state of mind.

10-14-2005, 12:34 PM	#20
VTECin5th Senior Member Join Date: Apr 2005 Location: Phoenix Az Age: 24 Posts: 2,188 iTrader: 0 / 0% Rep Power: 41	<div class='quotetop'>QUOTE(Callidus @ Oct 14 2005, 12:32 PM) Quoted post</div><div class='quotemain'> <div class='quotetop'>QUOTE(94CivicSlow @ Oct 14 2005, 11:56 AM) Quoted post</div><div class='quotemain'> And I found it very interesting[/b][/quote] [img]style_emoticons/<#EMO_DIR#>/blink.gif[/img] [img]style_emoticons/<#EMO_DIR#>/blink.gif[/img] [img]style_emoticons/<#EMO_DIR#>/dry.gif[/img] You guys counfound me. I have NO FUCKING IDEA what any of you are talking about. So I'll just leave this thread and remain in a confused state of mind. [/b][/quote] [img]style_emoticons/<#EMO_DIR#>/wave.gif[/img]

10-14-2005, 12:45 PM	#23
pissedoffsol RETIRED Join Date: Sep 2002 Location: Retirement Home Age: 29 Posts: 49,951 iTrader: 2 / 100% Ride: Electric Scooter Blog Entries: 1 Rep Power: 532	you need to learn OOP y0

10-14-2005, 12:49 PM	#24
VTECin5th Senior Member Join Date: Apr 2005 Location: Phoenix Az Age: 24 Posts: 2,188 iTrader: 0 / 0% Rep Power: 41	<div class='quotetop'>QUOTE(pissedoffsol @ Oct 14 2005, 12:45 PM) Quoted post</div><div class='quotemain'> you need to learn OOP y0 [/b][/quote] [img]style_emoticons/<#EMO_DIR#>/sad.gif[/img]

Hondaswap.com | Honda Technical & JDM styling Forums

myspace : owned

10-14-2005, 02:05 PM	#25
E_SolSi Member of the 20 nut club Join Date: Sep 2002 Location: CT Age: 32 Posts: 20,307 iTrader: 1 / 100% Rep Power: 736	<div class='quotetop'>QUOTE(94CivicSlow @ Oct 14 2005, 11:56 AM) Quoted post</div><div class='quotemain'> It wasnt a bug, it was a browser security exploit. Down with IE. And I found it very interesting... especially this page: http://namb.la/popular/tech.html Good Stuff [/b][/quote] NAMBLA [img]style_emoticons/<#EMO_DIR#>/wtf_anim.gif[/img]