Flash poses a security risk to GFY, change your sigs. - GoFuckYourself.com

Lensman · 10-15-2003, 12:53 PM

We recently became aware of a Flash exploit that allows, among other things, to steal a GFY user's cookie, load it on their computer and start posting as you, or worse, as a moderator and start deleting threads, banning people, etc.

We banned a flash parameter last week that we believed stopped this exploit. But after a malicious Flash demonstration last night, we have decided to not allow the em-bedding a flash in your posts or sigs. Even if our fix last week stopped the cookie exploit, a flash sig can launch pop-ups, and much more.

Last week, we notified many advertisers of this and asked them to quietly change their sigs to gifs, as we did not want to alert anyone who would potentially try to hack accounts.

GFY advertisers' banners are not effected.

You need to change your sigs to gifs or jpgs. Sorry for the hassle.

MetaMan · 10-15-2003, 12:53 PM

thank god!

Madball · 10-15-2003, 12:55 PM

Good news.

Babaganoosh · 10-15-2003, 12:56 PM

Thank fucking god. Those flash sigs that make noise are history!!

THANK YOU THANK YOU THANK YOU!!!!

hyatla · 10-15-2003, 12:56 PM

That's terrible.

I guess my sig is gif.

Rick Latona · 10-15-2003, 12:56 PM

No more sounds.

MetaMan · 10-15-2003, 12:57 PM

Quote:

Originally posted by Rick Latona
No more sounds.

BIG SIG

foolio · 10-15-2003, 12:59 PM

Quote:

Originally posted by hyatla
I guess my sig is gif.

lol, were you not sure what it was?

Furious_Male · 10-15-2003, 01:02 PM

Well at leasts its quiet in here now. The sigs with noise were a trip.

Ironhorse · 10-15-2003, 01:06 PM

I sale animated GIF sigs for $2000

10-15-2003, 01:06 PM

Good move. Just like GFY was fucked by using a JavaScript to change the cookie's user login data... ya remember the time pimpdawg was yelled at for that? Good times... poor guy still doesn't have a freakin' clue what happened there.

I might still have the code around here somewhere.

Amputate Your Head · 10-15-2003, 01:08 PM

haX0rs

adamneve · 10-15-2003, 01:09 PM

no more people whispering in my ear...

magicmike · 10-15-2003, 01:09 PM

No more sounds while scrolling down a page is okay with me.

JDog · 10-15-2003, 01:10 PM

Thank you Lens! I'm sure everybody is happy! No more nosie too!

jDoG

Tala · 10-15-2003, 01:10 PM

Quote:

Originally posted by Rick Latona
No more sounds.

Time to crank the music.....Dream Theater, anyone?

DarkJedi · 10-15-2003, 01:12 PM

Excellent !!

I hope those flash banner on top go too.

Naughty · 10-15-2003, 01:12 PM

bummer

necoeds · 10-15-2003, 01:13 PM

Shoplifter · 10-15-2003, 01:14 PM

Exploit or not this should be done..It's getting to be a sad circus.

10-15-2003, 01:14 PM

A PHP script can download other user's cookie info on your computer as well, ya know...

XxXotic · 10-15-2003, 01:15 PM

flash is the devil!

Tipsy · 10-15-2003, 01:22 PM

Great - sigs can stay on again. Far prefer to have them

Xplicit · 10-15-2003, 01:25 PM

Seriously THANK FUCKING GOD.

I cant think of a flash sig that i'll miss.

snowpimp · 10-15-2003, 01:27 PM

So how do I unban the people that had audio ads in their sig? I don't see that option anywhere...

nige · 10-15-2003, 01:27 PM

Time to enable the sigs again..

BadBoyBill4281 · 10-15-2003, 01:30 PM

well not to be a dick but i think it was a stupid mistake to take out flash banners we fixed our banner like everyone asked i think you just don't like the idea of technology at it's best live streaming audio and video yeah flash can do shared objects but not true cookies and sorry lens flash to hack your board come on man think of another way to insult someone for their advances with technology

you wanna ban flash but there already ways around the <hahahahaha> command just delete the sigs that break a new set of rules that you can come up with cause it's your board

SomeCreep · 10-15-2003, 01:39 PM

flash is lame, gifs rox0r.

Snake Doctor · 10-15-2003, 01:50 PM

Damn so no more "beep beep" or "fuck yeah" or "suck my dick bitch"

Its a sad sad day for GFY

BlueDesignStudios · 10-15-2003, 01:53 PM

I sale cheap animated GIF's...

WiredGuy · 10-15-2003, 01:53 PM

Thanks for the update Lens.
WG

chemicaleyes · 10-15-2003, 01:54 PM

Quote:

Originally posted by Lensman
We recently became aware of a Flash exploit that allows, among other things, to steal a GFY user's cookie, load it on their computer and start posting as you, or worse, as a moderator and start deleting threads, banning people, etc.

We banned a flash parameter last week that we believed stopped this exploit. But after a malicious Flash demonstration last night, we have decided to not allow the em-bedding a flash in your posts or sigs. Even if our fix last week stopped the cookie exploit, a flash sig can launch pop-ups, and much more.

Last week, we notified many advertisers of this and asked them to quietly change their sigs to gifs, as we did not want to alert anyone who would potentially try to hack accounts.

GFY advertisers' banners are not effected.

You need to change your sigs to gifs or jpgs. Sorry for the hassle.

BlueDesignStudios · 10-15-2003, 01:58 PM

Quote:

Originally posted by Lenny2
Damn so no more "beep beep" or "fuck yeah" or "suck my dick bitch"

Its a sad sad day for GFY

You can still get the noises when you mouse over on the top banner...

BradShaw · 10-15-2003, 02:08 PM

I for one will miss hearing my voice.

Serge_Oprano · 10-15-2003, 02:11 PM

Quote:

Originally posted by Lensman
We recently became aware of a Flash exploit that allows, among other things, to steal a GFY user's cookie, load it on their computer and start posting as you, or worse, as a moderator and start deleting threads, banning people, etc.

fuckers...
somebody got into my account and spammed Oprano and banned Amputate!

shiiiiiiiiittt!

Adult Site Traffic · 10-15-2003, 02:12 PM

Quote:

Originally posted by XxXotic
flash is the devil!

The DEVIL I tell YA ! The Devil is Baaaaaaannnnnnneeeddddd from among US !

Good move board, even tho I had to chg my button, it was needing done.

flashfreak · 10-15-2003, 02:14 PM

Quote:

Originally posted by SomeCreep
flash is lame, gifs rox0r.

I'd say "flash is evil"

PimpRoll · 10-15-2003, 02:40 PM

even though i just had a ton of flash banners made i'm cool with the old gif's

brizzad · 10-15-2003, 02:40 PM

you might as well go work at wendys

The Click · 10-15-2003, 02:55 PM

Buff · 10-15-2003, 02:55 PM

Quote:

Originally posted by brizzad
you might as well go work at wendys

You might as well go work at Wendy's.

Lonny · 10-15-2003, 02:57 PM

im flash free see my sig

scooby doo as scooby does · 10-15-2003, 03:20 PM

Flash fucking sux anyway. The main reason for using Mozilla is to turn flash off and not get any stupid IE type dialogs about 'the page not displaying correctly'.

EZRhino · 10-15-2003, 03:22 PM

username · 10-15-2003, 03:23 PM

"WHY DON'T YOU CLICK ME NOW"

Buff · 10-15-2003, 03:27 PM

Quote:

Originally posted by username
"WHY DON'T YOU CLICK ME NOW"

"HALLELUJAH!!!" ;) Oh... wait, you'll see that in a few... heh

10-15-2003, 03:31 PM

gifs are also good

Praguer · 10-15-2003, 03:35 PM

This is great !

Flash sigs slow down the whole thread loading time

brand0n · 10-15-2003, 03:39 PM

fixed mine =]

Mike AI · 10-15-2003, 03:43 PM

Sorry Lens for having the flash banner up.... Luke just told me the deal.

10-15-2003, 12:53 PM	#1
Lensman GFY Chaperone Join Date: Jan 2001 Location: Adult.com Posts: 9,846	Flash poses a security risk to GFY, change your sigs. We recently became aware of a Flash exploit that allows, among other things, to steal a GFY user's cookie, load it on their computer and start posting as you, or worse, as a moderator and start deleting threads, banning people, etc. We banned a flash parameter last week that we believed stopped this exploit. But after a malicious Flash demonstration last night, we have decided to not allow the em-bedding a flash in your posts or sigs. Even if our fix last week stopped the cookie exploit, a flash sig can launch pop-ups, and much more. Last week, we notified many advertisers of this and asked them to quietly change their sigs to gifs, as we did not want to alert anyone who would potentially try to hack accounts. GFY advertisers' banners are not effected. You need to change your sigs to gifs or jpgs. Sorry for the hassle. Last edited by Lensman; 10-15-2003 at 01:07 PM..

10-15-2003, 12:56 PM	#4
Babaganoosh ♥♥♥ Likes Hugs ♥♥♥ Industry Role: Join Date: Nov 2001 Location: /home Posts: 15,841	Thank fucking god. Those flash sigs that make noise are history!! THANK YOU THANK YOU THANK YOU!!!! __________________ I like pie.

10-15-2003, 12:56 PM	#5
hyatla Confirmed User Join Date: Oct 2003 Posts: 1,720	That's terrible. I guess my sig is gif. __________________ <a href="http://click.dtiserv2.com/Click/1125-99-us979" target="_blank">DTI cash: Top Asian Sponsor, $75 to new affiliates</a><br> <br> ICQ: 274731765

10-15-2003, 12:56 PM	#6
Rick Latona The Best Ideas Start Here Join Date: Dec 2002 Location: Atlanta Posts: 6,037	No more sounds. __________________ Regards, Rick Latona http://latonas.com Latona's - We Sell Money Making Web Properties Note to buyers of websites and traffic: please check our inventory at http://latonas.com/websites-for-sale. If you would like to make an offer on something, just let me know.

10-15-2003, 01:02 PM	#9
Furious_Male Doing the grind since 99 Industry Role: Join Date: Oct 2003 Location: Buffalo NY Posts: 16,881	Well at leasts its quiet in here now. The sigs with noise were a trip. __________________ Living in Virtual Reality Contact: Email (preferred): furiousmale .at. gmail - Skype: live:shanedws

10-15-2003, 12:53 PM	#2
MetaMan I AM WEB 2.0 Industry Role: Join Date: Jan 2003 Posts: 28,682	thank god!

10-15-2003, 12:55 PM	#3
Madball Confirmed User Join Date: May 2002 Location: Oslo, Norway Posts: 748	Good news.

10-15-2003, 01:06 PM	#10
Ironhorse Pixel Pusher Industry Role: Join Date: Nov 2002 Posts: 7,093	I sale animated GIF sigs for $2000 __________________ [email protected]

10-15-2003, 01:06 PM	#11
X37375787 Guest Posts: n/a	Good move. Just like GFY was fucked by using a JavaScript to change the cookie's user login data... ya remember the time pimpdawg was yelled at for that? Good times... poor guy still doesn't have a freakin' clue what happened there. I might still have the code around here somewhere.

10-15-2003, 01:08 PM	#12
Amputate Your Head There can be only one Industry Role: Join Date: Aug 2001 Location: Somewhere else Posts: 39,075	haX0rs __________________ SIG TOO BIG

10-15-2003, 01:09 PM	#13
adamneve LIVING LA VITA LOCA Industry Role: Join Date: Oct 2002 Location: Internet Posts: 13,324	no more people whispering in my ear... __________________ MetArtMoney.com - #1 Nude Affiliate Program MetArt CCbill Affiliate Tools 4K, HD, UP TO 50 MEGAPIXEL Mobile & Tablet Support Daily Updates HTML5 Tools skype: adamneve8 ICQ# 174167541 AIM: adineve YahooM: adineve

10-15-2003, 01:09 PM	#14
magicmike Confirmed User Industry Role: Join Date: Feb 2003 Location: JustPorno Posts: 2,384	No more sounds while scrolling down a page is okay with me. __________________ Just Porno with both classic and mobile porn versions. Gay Porn Our mega gay site tranny porn

10-15-2003, 01:10 PM	#15
JDog Confirmed User Join Date: Feb 2003 Location: Canby, OR Posts: 7,453	Thank you Lens! I'm sure everybody is happy! No more nosie too! jDoG __________________ NSCash now powering ReelProfits.com ALSO FEATURING: NSCash.com :: SoloDollars.com :: ReelProfits.com :: BiminiBucks.com :: VOD PROGRAMS COMING SOON: Greedy Bucks :: Vengeance Cash NOW OFFERING OVER 60 SITES CONTACT :: JAMES SMITH :: CHIEF TECHNOLOGY OFFICER :: ICQ (711385133)

10-15-2003, 01:12 PM	#17
DarkJedi No Refunds Issued. Industry Role: Join Date: Feb 2001 Location: GFY Posts: 28,300	Excellent !! I hope those flash banner on top go too.

10-15-2003, 01:12 PM	#18
Naughty Confirmed User Industry Role: Join Date: Jul 2001 Location: Utopia Posts: 6,482	bummer __________________ seks.ai for sale - ping me

10-15-2003, 01:13 PM	#19
necoeds Confirmed User Industry Role: Join Date: Nov 2002 Location: Lincoln, Nebraska Posts: 2,453	woot __________________ Message me to promote nebraskacoeds + network sites...

10-15-2003, 01:14 PM	#20
Shoplifter Richest man in Babylon Industry Role: Join Date: Jan 2002 Location: Posts: 10,002 Posts: 5,726	Exploit or not this should be done..It's getting to be a sad circus.

10-15-2003, 01:15 PM	#22
XxXotic Confirmed User Join Date: Jun 2002 Location: Da Swamps Posts: 8,500	flash is the devil! __________________ Sponsors.. Tired of people not using your shitty RSS Feeds? Let Us Help You! Oxeo - Serious Hosting For Serious Webmasters. iCQ:135.887013

10-15-2003, 01:22 PM	#23
Tipsy Confirmed User Join Date: Jul 2001 Location: See sig Posts: 6,989	Great - sigs can stay on again. Far prefer to have them __________________ Ignorance is never bliss.

10-15-2003, 01:25 PM	#24
Xplicit Confirmed User Join Date: May 2003 Location: █◄►█ Posts: 3,558	Seriously THANK FUCKING GOD. I cant think of a flash sig that i'll miss.

10-15-2003, 01:27 PM	#25
snowpimp Confirmed User Join Date: Feb 2002 Location: South Lake Tahoe, CA Posts: 1,099	So how do I unban the people that had audio ads in their sig? I don't see that option anywhere... __________________ HIGH QUALITY ADULT AND NON-ADULT DESIGN/MARKETING WORK SINCE 1997!! Yan - ICQ # 4790444 - Phone: 530-544-7058 SIGNS, GRAPHICS & PRINTING ~ NETWORKING AND IT SERVICES

10-15-2003, 01:27 PM	#26
nige Confirmed User Join Date: Feb 2002 Location: Finland Posts: 435	Time to enable the sigs again..

10-15-2003, 01:30 PM	#27
BadBoyBill4281 Confirmed User Industry Role: Join Date: May 2002 Location: West Palm Beach, Florida Posts: 616	well not to be a dick but i think it was a stupid mistake to take out flash banners we fixed our banner like everyone asked i think you just don't like the idea of technology at it's best live streaming audio and video yeah flash can do shared objects but not true cookies and sorry lens flash to hack your board come on man think of another way to insult someone for their advances with technology you wanna ban flash but there already ways around the <hahahahaha> command just delete the sigs that break a new set of rules that you can come up with cause it's your board __________________ ICQ#128496425 www.swinginglocal.com

10-15-2003, 01:39 PM	#28
SomeCreep :glugglug Join Date: Mar 2003 Location: Where the Wild Things Are Posts: 26,118	flash is lame, gifs rox0r. __________________ Webair Hosting I use and recommend Webair for hosting.

10-15-2003, 01:50 PM	#29
Snake Doctor I'm Lenny2 Bitch Join Date: Mar 2001 Location: On top of my soapbox Posts: 13,449	Damn so no more "beep beep" or "fuck yeah" or "suck my dick bitch" Its a sad sad day for GFY __________________ sig too big

10-15-2003, 01:53 PM	#30
BlueDesignStudios Confirmed User Industry Role: Join Date: Feb 2003 Location: Australia Posts: 9,492	I sale cheap animated GIF's... __________________ Blue Design Studios - Adult Design Specialists! Email me for a free quote: [email protected]

10-15-2003, 01:53 PM	#31
WiredGuy Pounding Googlebot Industry Role: Join Date: Aug 2002 Location: Canada Posts: 34,482	Thanks for the update Lens. WG __________________ I play with Google.

10-15-2003, 02:08 PM	#34
BradShaw Confirmed User Join Date: Oct 2001 Location: KB's trailer Posts: 7,840	I for one will miss hearing my voice. __________________ Sig too big http://www.gofuckyourself.com/gfy_faqs.html Want to use a large banner in your sig??? Contact Eric about getting on as an advertiser - eric AT adult.com

10-15-2003, 02:40 PM	#38
PimpRoll Confirmed User Join Date: Apr 2003 Location: PimpRoll Posts: 1,053	even though i just had a ton of flash banners made i'm cool with the old gif's __________________ www.PimpRoll.com - $35-$40 per Trial Join - Weekly Payouts Over 200+ Sites to Promote in 30 Niches - Free Hosting

10-15-2003, 02:40 PM	#39
brizzad holla Join Date: Jul 2003 Location: KFC Posts: 11,769	you might as well go work at wendys

10-15-2003, 02:55 PM	#40
The Click Confirmed User Join Date: Apr 2003 Location: Canada Posts: 1,685	__________________ ICQ: 31-30-30

10-15-2003, 02:57 PM	#42
Lonny Confirmed User Join Date: Jun 2003 Location: Riverside Ca. Posts: 3,539	im flash free see my sig __________________ crakrevenue

10-15-2003, 03:20 PM	#43
scooby doo as scooby does Confirmed User Join Date: Nov 2002 Location: A deep dark place. Posts: 314	Flash fucking sux anyway. The main reason for using Mozilla is to turn flash off and not get any stupid IE type dialogs about 'the page not displaying correctly'. __________________ In 1904, Charles Newman-Berry connected two abacus's together using specially enhanced GrapeVine thus inventing the first Internet connection. NEWMAN-BERRY CASH Paying webmaster since 1904

10-15-2003, 03:22 PM	#44
EZRhino Confirmed User Industry Role: Join Date: Jul 2003 Location: couch Posts: 6,258

10-15-2003, 03:23 PM	#45
username Confirmed User Join Date: Aug 2003 Location: WI Posts: 702	"WHY DON'T YOU CLICK ME NOW" __________________ Dreaming of money? Click to Signup and Make your dreams come true!