Flash poses a security risk to GFY, change your sigs.

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Lensman
    GFY Chaperone
    • Jan 2001
    • 9846

    #1

    Flash poses a security risk to GFY, change your sigs.

    We recently became aware of a Flash exploit that allows, among other things, to steal a GFY user's cookie, load it on their computer and start posting as you, or worse, as a moderator and start deleting threads, banning people, etc.

    We banned a flash parameter last week that we believed stopped this exploit. But after a malicious Flash demonstration last night, we have decided to not allow the em-bedding a flash in your posts or sigs. Even if our fix last week stopped the cookie exploit, a flash sig can launch pop-ups, and much more.

    Last week, we notified many advertisers of this and asked them to quietly change their sigs to gifs, as we did not want to alert anyone who would potentially try to hack accounts.

    GFY advertisers' banners are not effected.

    You need to change your sigs to gifs or jpgs. Sorry for the hassle.
    Last edited by Lensman; 10-15-2003, 12:07 PM.
  • MetaMan
    I AM WEB 2.0
    • Jan 2003
    • 28682

    #2
    thank god!

    Comment

    • Madball
      Confirmed User
      • May 2002
      • 748

      #3
      Good news.
      <a href="http://www.homepageofthedead.com"><img src="http://board.gofuckyourself.com/images/globill_88x31.gif"></a>

      Comment

      • Babaganoosh
        ♥♥♥ Likes Hugs ♥♥♥
        • Nov 2001
        • 15841

        #4
        Thank fucking god. Those flash sigs that make noise are history!!

        THANK YOU THANK YOU THANK YOU!!!!
        I like pie.

        Comment

        • hyatla
          Confirmed User
          • Oct 2003
          • 1720

          #5
          That's terrible.

          I guess my sig is gif.
          <a href="http://click.dtiserv2.com/Click/1125-99-us979" target="_blank">DTI cash: Top Asian Sponsor, $75 to new affiliates</a><br>
          <br>
          ICQ: 274731765

          Comment

          • Rick Latona
            The Best Ideas Start Here
            • Dec 2002
            • 6037

            #6
            No more sounds.
            Regards,

            Rick Latona
            http://latonas.com

            Latona's - We Sell Money Making Web Properties
            Note to buyers of websites and traffic: please check our inventory at http://latonas.com/websites-for-sale. If you would like to make an offer on something, just let me know.

            Comment

            • MetaMan
              I AM WEB 2.0
              • Jan 2003
              • 28682

              #7
              Originally posted by Rick Latona
              No more sounds.
              BIG SIG

              Comment

              • foolio
                ICQ: 178725656
                • Nov 2002
                • 12366

                #8
                Originally posted by hyatla
                I guess my sig is gif.
                lol, were you not sure what it was?

                Comment

                • Furious_Male
                  Doing the grind since 99
                  • Oct 2003
                  • 16884

                  #9
                  Well at leasts its quiet in here now. The sigs with noise were a trip.
                  Living in Virtual Reality
                  Contact: Email (preferred): furiousmale .at. gmail - Skype: live:shanedws

                  Comment

                  • Ironhorse
                    Pixel Pusher
                    • Nov 2002
                    • 7094

                    #10
                    I sale animated GIF sigs for $2000
                    [email protected]

                    Comment

                    • X37375787

                      #11
                      Good move. Just like GFY was fucked by using a JavaScript to change the cookie's user login data... ya remember the time pimpdawg was yelled at for that? Good times... poor guy still doesn't have a freakin' clue what happened there.

                      I might still have the code around here somewhere.

                      Comment

                      • Amputate Your Head
                        There can be only one
                        • Aug 2001
                        • 39075

                        #12
                        haX0rs
                        SIG TOO BIG

                        Comment

                        • adamneve
                          LIVING LA VITA LOCA
                          • Oct 2002
                          • 13333

                          #13
                          no more people whispering in my ear...
                          ThickCash.com - Premium Network

                          New Webcam Site - MyCam1.com - Middle Eastern Cams

                          Telegram: @adamsc23

                          Comment

                          • magicmike
                            Confirmed User
                            • Feb 2003
                            • 2384

                            #14



                            No more sounds while scrolling down a page is okay with me.
                            Just Porno with both classic and mobile porn versions.
                            Gay Porn Our mega gay site tranny porn

                            Comment

                            • JDog
                              Confirmed User
                              • Feb 2003
                              • 7453

                              #15
                              Thank you Lens! I'm sure everybody is happy! No more nosie too!

                              jDoG
                              NSCash now powering ReelProfits.com
                              ALSO FEATURING: NSCash.com :: SoloDollars.com :: ReelProfits.com :: BiminiBucks.com :: VOD
                              PROGRAMS COMING SOON: Greedy Bucks :: Vengeance Cash
                              NOW OFFERING OVER 60 SITES
                              CONTACT :: JAMES SMITH :: CHIEF TECHNOLOGY OFFICER :: ICQ (711385133)

                              Comment

                              • Tala
                                Fucked if I know
                                • Dec 2002
                                • 23368

                                #16
                                Originally posted by Rick Latona
                                No more sounds.
                                Time to crank the music.....Dream Theater, anyone?

                                ICQ: 11120676 | Google: mindcrime | Skype: suitemindcrime|E-Mail: mindcrime AT gmail.com|PR girl with great writing skills for hire!!!! Contact me to work for YOU!|TECHIEMEDIA? 24/7 support from some of the best techs in the biz. Tell Jim that I sent you.

                                Comment

                                • DarkJedi
                                  No Refunds Issued.
                                  • Feb 2001
                                  • 28301

                                  #17
                                  Excellent !!

                                  I hope those flash banner on top go too.

                                  Comment

                                  • Naughty
                                    Confirmed User
                                    • Jul 2001
                                    • 6484

                                    #18
                                    bummer
                                    seks.ai for sale - ping me

                                    Comment

                                    • necoeds
                                      Confirmed User
                                      • Nov 2002
                                      • 2453

                                      #19
                                      woot
                                      Message me to promote nebraskacoeds + network sites...

                                      Comment

                                      • Shoplifter
                                        Richest man in Babylon
                                        • Jan 2002
                                        • 5879

                                        #20
                                        Exploit or not this should be done..It's getting to be a sad circus.
                                        I Like Blondes

                                        Comment

                                        • X37375787

                                          #21
                                          A PHP script can download other user's cookie info on your computer as well, ya know...

                                          Comment

                                          • XxXotic
                                            Confirmed User
                                            • Jun 2002
                                            • 8500

                                            #22
                                            flash is the devil!
                                            Oxeo - Serious Hosting For Serious Webmasters. iCQ:135.887013

                                            Comment

                                            • Tipsy
                                              Confirmed User
                                              • Jul 2001
                                              • 6989

                                              #23
                                              Great - sigs can stay on again. Far prefer to have them
                                              Ignorance is never bliss.

                                              Comment

                                              • Xplicit
                                                Confirmed User
                                                • May 2003
                                                • 3558

                                                #24
                                                Seriously THANK FUCKING GOD.

                                                I cant think of a flash sig that i'll miss.

                                                Comment

                                                • snowpimp
                                                  Confirmed User
                                                  • Feb 2002
                                                  • 1099

                                                  #25
                                                  So how do I unban the people that had audio ads in their sig? I don't see that option anywhere...
                                                  HIGH QUALITY ADULT AND NON-ADULT DESIGN/MARKETING WORK SINCE 1997!!

                                                  Yan - ICQ # 4790444 - Phone: 530-544-7058

                                                  Comment

                                                  • nige
                                                    Confirmed User
                                                    • Feb 2002
                                                    • 435

                                                    #26
                                                    Time to enable the sigs again..
                                                    Submit galleries? Need Partner Accounts?
                                                    Try Partner Pass

                                                    Comment

                                                    • BadBoyBill4281
                                                      Confirmed User
                                                      • May 2002
                                                      • 616

                                                      #27
                                                      well not to be a dick but i think it was a stupid mistake to take out flash banners we fixed our banner like everyone asked i think you just don't like the idea of technology at it's best live streaming audio and video yeah flash can do shared objects but not true cookies and sorry lens flash to hack your board come on man think of another way to insult someone for their advances with technology


                                                      you wanna ban flash but there already ways around the <hahahahaha> command just delete the sigs that break a new set of rules that you can come up with cause it's your board
                                                      ICQ#128496425

                                                      www.swinginglocal.com

                                                      Comment

                                                      • SomeCreep
                                                        :glugglug
                                                        • Mar 2003
                                                        • 26118

                                                        #28
                                                        flash is lame, gifs rox0r.

                                                        Webair Hosting

                                                        I use and recommend Webair for hosting.

                                                        Comment

                                                        • Snake Doctor
                                                          I'm Lenny2 Bitch
                                                          • Mar 2001
                                                          • 13449

                                                          #29
                                                          Damn so no more "beep beep" or "fuck yeah" or "suck my dick bitch"

                                                          Its a sad sad day for GFY
                                                          sig too big

                                                          Comment

                                                          • BlueDesignStudios
                                                            Confirmed User
                                                            • Feb 2003
                                                            • 9492

                                                            #30
                                                            I sale cheap animated GIF's...

                                                            Blue Design Studios - Adult Design Specialists!
                                                            Email me for a free quote: [email protected]

                                                            Comment

                                                            • WiredGuy
                                                              Pounding Googlebot
                                                              • Aug 2002
                                                              • 34517

                                                              #31
                                                              Thanks for the update Lens.
                                                              WG
                                                              I play with Google.

                                                              Comment

                                                              • chemicaleyes
                                                                UNSTOPPABLE
                                                                • Aug 2003
                                                                • 11569

                                                                #32
                                                                Originally posted by Lensman
                                                                We recently became aware of a Flash exploit that allows, among other things, to steal a GFY user's cookie, load it on their computer and start posting as you, or worse, as a moderator and start deleting threads, banning people, etc.

                                                                We banned a flash parameter last week that we believed stopped this exploit. But after a malicious Flash demonstration last night, we have decided to not allow the em-bedding a flash in your posts or sigs. Even if our fix last week stopped the cookie exploit, a flash sig can launch pop-ups, and much more.

                                                                Last week, we notified many advertisers of this and asked them to quietly change their sigs to gifs, as we did not want to alert anyone who would potentially try to hack accounts.

                                                                GFY advertisers' banners are not effected.

                                                                You need to change your sigs to gifs or jpgs. Sorry for the hassle.
                                                                No way as way, No limitation as limitation. AmeriNOC formally PhatServers

                                                                Comment

                                                                • BlueDesignStudios
                                                                  Confirmed User
                                                                  • Feb 2003
                                                                  • 9492

                                                                  #33
                                                                  Originally posted by Lenny2
                                                                  Damn so no more "beep beep" or "fuck yeah" or "suck my dick bitch"

                                                                  Its a sad sad day for GFY
                                                                  You can still get the noises when you mouse over on the top banner...

                                                                  Blue Design Studios - Adult Design Specialists!
                                                                  Email me for a free quote: [email protected]

                                                                  Comment

                                                                  • BradShaw
                                                                    Confirmed User
                                                                    • Oct 2001
                                                                    • 7840

                                                                    #34
                                                                    I for one will miss hearing my voice.
                                                                    Sig too big

                                                                    http://www.gofuckyourself.com/gfy_faqs.html

                                                                    Want to use a large banner in your sig??? Contact Eric about getting on as an advertiser - eric AT adult.com

                                                                    Comment

                                                                    • Serge_Oprano
                                                                      So Fucking Banned
                                                                      • Feb 2002
                                                                      • 9820

                                                                      #35
                                                                      Originally posted by Lensman
                                                                      We recently became aware of a Flash exploit that allows, among other things, to steal a GFY user's cookie, load it on their computer and start posting as you, or worse, as a moderator and start deleting threads, banning people, etc.

                                                                      fuckers...
                                                                      somebody got into my account and spammed Oprano and banned Amputate!

                                                                      shiiiiiiiiittt!

                                                                      Comment

                                                                      • Adult Site Traffic
                                                                        Confirmed User
                                                                        • Mar 2003
                                                                        • 5093

                                                                        #36
                                                                        Originally posted by XxXotic
                                                                        flash is the devil!
                                                                        The DEVIL I tell YA ! The Devil is Baaaaaaannnnnnneeeddddd from among US !

                                                                        Good move board, even tho I had to chg my button, it was needing done.

                                                                        ALL Domains and Websites are GOING AWAY NOW! Ask me!
                                                                        Many great domains, mainstream and adult, some complete sites with databases, some names with traffic and PR, some investment quality names. Come take a look! { Traffic Orders: Please go here }

                                                                        .:: SHARPEN the Elite - BURN the leftovers! Ooh-Rah!! ::.

                                                                        Comment

                                                                        • flashfreak
                                                                          Confirmed User
                                                                          • Jun 2002
                                                                          • 4396

                                                                          #37
                                                                          Originally posted by SomeCreep
                                                                          flash is lame, gifs rox0r.
                                                                          I'd say "flash is evil"
                                                                          SEO Mogul | ICQ: 163671223

                                                                          Comment

                                                                          • PimpRoll
                                                                            Confirmed User
                                                                            • Apr 2003
                                                                            • 1053

                                                                            #38
                                                                            even though i just had a ton of flash banners made i'm cool with the old gif's

                                                                            Comment

                                                                            • brizzad
                                                                              holla
                                                                              • Jul 2003
                                                                              • 11769

                                                                              #39
                                                                              you might as well go work at wendys

                                                                              Comment

                                                                              • The Click
                                                                                Confirmed User
                                                                                • Apr 2003
                                                                                • 1685

                                                                                #40


                                                                                ICQ: 31-30-30

                                                                                Comment

                                                                                • Buff
                                                                                  GFY Assassin
                                                                                  • May 2003
                                                                                  • 2993

                                                                                  #41
                                                                                  Originally posted by brizzad
                                                                                  you might as well go work at wendys
                                                                                  You might as well go work at Wendy's.

                                                                                  Comment

                                                                                  • Lonny
                                                                                    Confirmed User
                                                                                    • Jun 2003
                                                                                    • 3539

                                                                                    #42
                                                                                    im flash free see my sig

                                                                                    Comment

                                                                                    • scooby doo as scooby does
                                                                                      Confirmed User
                                                                                      • Nov 2002
                                                                                      • 314

                                                                                      #43
                                                                                      Flash fucking sux anyway. The main reason for using Mozilla is to turn flash off and not get any stupid IE type dialogs about 'the page not displaying correctly'.
                                                                                      In 1904, Charles Newman-Berry connected two abacus's together using specially enhanced GrapeVine thus inventing the first Internet connection.

                                                                                      NEWMAN-BERRY CASH
                                                                                      Paying webmaster since 1904

                                                                                      Comment

                                                                                      • EZRhino
                                                                                        Confirmed User
                                                                                        • Jul 2003
                                                                                        • 6258

                                                                                        #44

                                                                                        Comment

                                                                                        • username
                                                                                          Confirmed User
                                                                                          • Aug 2003
                                                                                          • 702

                                                                                          #45
                                                                                          "WHY DON'T YOU CLICK ME NOW"

                                                                                          Comment

                                                                                          • Buff
                                                                                            GFY Assassin
                                                                                            • May 2003
                                                                                            • 2993

                                                                                            #46
                                                                                            Originally posted by username
                                                                                            "WHY DON'T YOU CLICK ME NOW"
                                                                                            "HALLELUJAH!!!" ;) Oh... wait, you'll see that in a few... heh

                                                                                            Comment

                                                                                            • buddyjuf

                                                                                              #47
                                                                                              gifs are also good

                                                                                              Comment

                                                                                              • Praguer
                                                                                                Confirmed User
                                                                                                • Dec 2002
                                                                                                • 991

                                                                                                #48
                                                                                                This is great !

                                                                                                Flash sigs slow down the whole thread loading time


                                                                                                High Quality-High Definition Adult Content
                                                                                                ICQ: 348740763

                                                                                                Comment

                                                                                                • brand0n
                                                                                                  been very busy
                                                                                                  • Nov 2002
                                                                                                  • 26983

                                                                                                  #49
                                                                                                  fixed mine =]
                                                                                                  want to buy this spot for cheap? it is of course for sale. long term deals are always the best bet. brand0n/ at/ a o l dot commies.

                                                                                                  Comment

                                                                                                  • Mike AI
                                                                                                    Confirmed User
                                                                                                    • Jan 2001
                                                                                                    • 3624

                                                                                                    #50
                                                                                                    Sorry Lens for having the flash banner up.... Luke just told me the deal.


                                                                                                    Make big money on your Domains! Why wait 40 days to get paid with the other guys? Parked.com pays the most for your traffic, and cuts checks twice a month!

                                                                                                    Comment

                                                                                                    Working...