Gfy(lite) A Solution to the search feature.

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • SmokeyTheBear
    ►SouthOfHeaven
    • Jun 2004
    • 28609

    #1

    Gfy(lite) A Solution to the search feature.

    It seems strange that gfy cannot keep its search feature working very long. The board is huge and it obviously uses alot of resources to keep it backed up, but i think it should be easier once you upgrade the script, ( and im not sure what is holding you back )

    With the enormous amount of webmasters on this board, im sure someone can help gfy get things fixed.

    I have created a simple app that checks gfy on a timer for the latest 50 threads. It displays the top 50 threads in a small window. You can set triggers for certain words you may wish to track in a thread title. When it detects a thread to be tracked it pops up a window with an internal browser to view and respond to the thread.

    Very usefull for going to sleep and waking up to find your tracked threads waiting for you to respond.

    When i initially made this program i added alot of features that i have since disabled , due to the negative effect it could have on gfy.

    --- An Autoresponder for threads ( this could be abused )
    --- Tracking by post not just by thread title ( this uses up mega gfy resources , but im working on a simpler version )
    --- A login structure ( not sure if lens would like this or if many would trust this )

    I dont want to release this program if gfy is completely opposed to the idea, or if gfy plans to upgrade anytime in the near future..

    Any other features that you would like to see, please respond.

    Some important notes...

    GFY LOGIN SCRIPT IS UNSECURE !!!
    GFY PROFILES ARE UNSECURE !!!

    When running a program i designed to check my own board for vulnerable passwords, i found THOUSANDS of vulnerable passwords on gfy.

    Because i dont have access to the gfy admin account ( cough cough ) it is not capable of informing users by email to change their passwords. But if lens ( or another gfy employee ) would simply run this program you could save yourself some future problems...
    hatisblack at yahoo.com
  • Manowar
    jellyfish  
    • Dec 2003
    • 71528

    #2
    whats a working search url worth to you

    Comment

    • misterfooxy
      Confirmed User
      • Apr 2004
      • 203

      #3
      YOOU ROCK

      Comment

      • SmokeyTheBear
        ►SouthOfHeaven
        • Jun 2004
        • 28609

        #4
        Originally posted by Manowar
        whats a working search url worth to you
        I dont need it i have my own
        hatisblack at yahoo.com

        Comment

        • Gynecologist
          Confirmed User
          • Sep 2004
          • 2184

          #5
          Originally posted by Manowar
          whats a working search url worth to you
          I will click your sig 10 times.

          Comment

          • kaliboy2g
            So Fucking Banned (YEA!!)
            • Jun 2004
            • 10963

            #6
            Originally posted by Manowar
            whats a working search url worth to you

            several clicks on the website in your profile.

            If you have it, please ICQ me.
            Care about me?
            Who?
            Me!
            Who?

            Comment

            • misterfooxy
              Confirmed User
              • Apr 2004
              • 203

              #7
              Originally posted by Manowar
              whats a working search url worth to you
              5 000 $

              Comment

              • polish_aristocrat
                Too lazy to set a custom title
                • Jul 2002
                • 40377

                #8
                Originally posted by Gynecologist
                I will click your sig 10 times.
                I don't use ICQ anymore.

                Comment

                • brand0n
                  been very busy
                  • Nov 2002
                  • 26983

                  #9
                  sup smoke dog
                  want to buy this spot for cheap? it is of course for sale. long term deals are always the best bet. brand0n/ at/ a o l dot commies.

                  Comment

                  • BradM
                    Confirmed User
                    • Dec 2003
                    • 3397

                    #10
                    Smokey,

                    I know what is holding them back. Lensman doesn't give a fuck. That's why this place sucks a hairy ball sack lately.

                    Comment

                    • polish_aristocrat
                      Too lazy to set a custom title
                      • Jul 2002
                      • 40377

                      #11
                      Originally posted by BradM
                      this place sucks a hairy ball sack lately.
                      True
                      I don't use ICQ anymore.

                      Comment

                      • SmokeyTheBear
                        ►SouthOfHeaven
                        • Jun 2004
                        • 28609

                        #12
                        Originally posted by BradM
                        Smokey,

                        I know what is holding them back. Lensman doesn't give a fuck. That's why this place sucks a hairy ball sack lately.
                        Lens has alot on his plate.

                        That being said, gfy will have some bad days soon if something is not done.

                        If i can use admin feature then eventually someone without ethics will use it and fuck up gfy. Its as simple as that.

                        I found an unlocked door in the back of the gfy bank vault. Eventually someone else will notice the door is open as well.
                        hatisblack at yahoo.com

                        Comment

                        • BradM
                          Confirmed User
                          • Dec 2003
                          • 3397

                          #13
                          Originally posted by SmokeyTheBear
                          Lens has alot on his plate.
                          So what? This place has about 40 advertisers paying 3 grand a month

                          Dont fucking tell me they cant fire some fag intern to moderate this board. They could hire a fulltime employee JUST on what we pay in advertising on this board.

                          He doesnt care, because the more threads like this that happen = more pageviews = more $.

                          It's a horrible way to run a business.

                          Comment

                          • misterfooxy
                            Confirmed User
                            • Apr 2004
                            • 203

                            #14
                            smokey

                            stop babbling and give us the search

                            Comment

                            • goBigtime
                              Confirmed User
                              • Nov 2002
                              • 7761

                              #15
                              I hope the GFY search has been down for these past months because it increases page views and post counts to have it down (by forcing people to start new threads and ask questions they would rather search for).


                              At least that would be strategic.

                              Comment

                              • SmokeyTheBear
                                ►SouthOfHeaven
                                • Jun 2004
                                • 28609

                                #16
                                Originally posted by BradM
                                So what? This place has about 40 advertisers paying 3 grand a month

                                Dont fucking tell me they cant fire some fag intern to moderate this board. They could hire a fulltime employee JUST on what we pay in advertising on this board.

                                He doesnt care, because the more threads like this that happen = more pageviews = more $.

                                It's a horrible way to run a business.
                                I agree, but if every gfy user lost his name in 1 day , guess how many pageviews gfy gets.. ( well a bunch at first , but )

                                And its got holes right now that would allow exactly that.
                                hatisblack at yahoo.com

                                Comment

                                • polish_aristocrat
                                  Too lazy to set a custom title
                                  • Jul 2002
                                  • 40377

                                  #17
                                  Originally posted by goBigtime


                                  At least that would be strategic.
                                  And disappointing if true.
                                  I don't use ICQ anymore.

                                  Comment

                                  • misterfooxy
                                    Confirmed User
                                    • Apr 2004
                                    • 203

                                    #18
                                    Originally posted by SmokeyTheBear
                                    I agree, but if every gfy user lost his name in 1 day , guess how many pageviews gfy gets.. ( well a bunch at first , but )

                                    And its got holes right now that would allow exactly that.
                                    goatse is nothing compared to gfy

                                    Comment

                                    • BradM
                                      Confirmed User
                                      • Dec 2003
                                      • 3397

                                      #19
                                      So do it Smoke. Maybe something will get done. Only time changes are made here is when you fuck with the board. You're the catalyst we all need and love.

                                      Comment

                                      • tical
                                        Confirmed User
                                        • Feb 2002
                                        • 6504

                                        #20
                                        Log in and set everyones post count to 0

                                        that would be funny
                                        112.020.756

                                        Comment

                                        • Gynecologist
                                          Confirmed User
                                          • Sep 2004
                                          • 2184

                                          #21
                                          Originally posted by tical
                                          Log in and set everyones post count to 0

                                          that would be funny
                                          That would push a few people to suicide.

                                          Comment

                                          • pussyluver
                                            Clueless OleMan
                                            • Mar 2003
                                            • 11009

                                            #22
                                            Do ya blame vBulletin for the security issues or adult.com for setup of servers and the program?

                                            Comment

                                            • misterfooxy
                                              Confirmed User
                                              • Apr 2004
                                              • 203

                                              #23
                                              lol ... smokey is pseudo. he's all mouth and no action.

                                              i bet he can not even bypass a javascript login protection.

                                              Comment

                                              • polish_aristocrat
                                                Too lazy to set a custom title
                                                • Jul 2002
                                                • 40377

                                                #24
                                                Originally posted by tical
                                                Log in and set everyones post count to 0

                                                that would be funny
                                                But just temporary
                                                I don't use ICQ anymore.

                                                Comment

                                                • SmokeyTheBear
                                                  ►SouthOfHeaven
                                                  • Jun 2004
                                                  • 28609

                                                  #25
                                                  Originally posted by BradM
                                                  So do it Smoke. Maybe something will get done. Only time changes are made here is when you fuck with the board. You're the catalyst we all need and love.
                                                  No way jose..

                                                  I can advise someone for lensman to contact to fix the problems, but...

                                                  I like gfy and i dont think you could reverse the changes if you fucked it up like that, it would cause chaos. If i thought gfy could just rollback to yesterday maybe i would explain the problems in detail and let someone else exploit them ,but i dont htink thats possible
                                                  hatisblack at yahoo.com

                                                  Comment

                                                  • SmokeyTheBear
                                                    ►SouthOfHeaven
                                                    • Jun 2004
                                                    • 28609

                                                    #26
                                                    Originally posted by pussyluver
                                                    Do ya blame vBulletin for the security issues or adult.com for setup of servers and the program?
                                                    they arent using the latest version of vbulletin so i dont blame vbulletin i blame apathy
                                                    hatisblack at yahoo.com

                                                    Comment

                                                    • misterfooxy
                                                      Confirmed User
                                                      • Apr 2004
                                                      • 203

                                                      #27
                                                      Originally posted by SmokeyTheBear
                                                      No way jose..

                                                      I can advise someone for lensman to contact to fix the problems, but...

                                                      I like gfy and i dont think you could reverse the changes if you fucked it up like that, it would cause chaos. If i thought gfy could just rollback to yesterday maybe i would explain the problems in detail and let someone else exploit them ,but i dont htink thats possible
                                                      Translation:

                                                      i talk only shit. i have no hacking skills. i have not found any holes in gfy. heck, i don't even know how to bypass javascript login protections.

                                                      Comment

                                                      • goBigtime
                                                        Confirmed User
                                                        • Nov 2002
                                                        • 7761

                                                        #28
                                                        Originally posted by pussyluver
                                                        Do ya blame vBulletin for the security issues or adult.com for setup of servers and the program?
                                                        No idea what smokey is talking about, but I'm guessing he just knows the history of security fixes to VB 2.x and has checked to see which ones have not been patched here @ GFY.

                                                        Figuring GFY is probably a pretty standard out of the box VB 2.x install (maybe with a little clustering going on)... well... lets just say that VB is so widely used, that when bugs are found, patches/fixes are made available pretty quickly.

                                                        But it's still up to the individual forum admins to install them.
                                                        Last edited by goBigtime; 10-16-2004, 11:58 AM.

                                                        Comment

                                                        • SmokeyTheBear
                                                          ►SouthOfHeaven
                                                          • Jun 2004
                                                          • 28609

                                                          #29
                                                          Originally posted by misterfooxy
                                                          Translation:

                                                          i talk only shit. i have no hacking skills. i have not found any holes in gfy. heck, i don't even know how to bypass javascript login protections.
                                                          you got me ..
                                                          hatisblack at yahoo.com

                                                          Comment

                                                          • SmokeyTheBear
                                                            ►SouthOfHeaven
                                                            • Jun 2004
                                                            • 28609

                                                            #30
                                                            Originally posted by goBigtime
                                                            No idea what smokey is talking about, but I'm guessing he just knows the history of security fixes to VB 2.x and has checked to see which ones have not been patched here @ GFY.

                                                            Figuring GFY is probably a pretty standard out of the box VB 2.x install (maybe with a little clustering going on)... well... lets just say that VB is so widely used, that when bugs are found, patches/fixes are made available pretty quickly.

                                                            But it's still up to the individual forum admins to install them.
                                                            Umm yah, did i claim anything different ??

                                                            I RUN A VB FORUM !! yes i know some of the patches. Thats kind of the point if you missed it.

                                                            GFY is very very popular thats the problem. If it were a small forum it wouldn't be hard to fix and it wouldnt even be much of a concern. But gfy is huge. I dont charge 5k for adspace either lol

                                                            I'm not trying to claim i'm some fucking god , i'm saying

                                                            HEY THE BACKDOOR TO THE VAULT IS OPEN. CLOSE IT
                                                            hatisblack at yahoo.com

                                                            Comment

                                                            • misterfooxy
                                                              Confirmed User
                                                              • Apr 2004
                                                              • 203

                                                              #31
                                                              Announcement:

                                                              Smokey is selling GFY adspace 20% cheaper than Lensman

                                                              Comment

                                                              • psyko514
                                                                See sig. Join Epic Cash.
                                                                • Oct 2002
                                                                • 22366

                                                                #32
                                                                Originally posted by misterfooxy
                                                                Translation:

                                                                i talk only shit. i have no hacking skills. i have not found any holes in gfy. heck, i don't even know how to bypass javascript login protections.
                                                                you're wrong.

                                                                everything he's saying he can do, it's possible. a lot of the things have already been done in fact. he's already done a few things himself.

                                                                Bad Girl Bucks
                                                                - 50% Revshare through CCBill.
                                                                Promote BrandyDDD, Pixie's Pillows, Action Allie and more!

                                                                Phoenix Forum Pics | Webmaster Access Montreal pics
                                                                email: psyko514(a)gmail.com | icq: 214-702-014

                                                                Comment

                                                                • SmokeyTheBear
                                                                  ►SouthOfHeaven
                                                                  • Jun 2004
                                                                  • 28609

                                                                  #33
                                                                  Originally posted by psyko514
                                                                  you're wrong.

                                                                  everything he's saying he can do, it's possible. a lot of the things have already been done in fact. he's already done a few things himself.
                                                                  *blushes.. i did not...

                                                                  Turn on your icq for a sec.
                                                                  hatisblack at yahoo.com

                                                                  Comment

                                                                  • goBigtime
                                                                    Confirmed User
                                                                    • Nov 2002
                                                                    • 7761

                                                                    #34
                                                                    Originally posted by SmokeyTheBear
                                                                    Umm yah, did i claim anything different ??

                                                                    I RUN A VB FORUM !! yes i know some of the patches. Thats kind of the point if you missed it.

                                                                    GFY is very very popular thats the problem. If it were a small forum it wouldn't be hard to fix and it wouldnt even be much of a concern. But gfy is huge. I dont charge 5k for adspace either lol

                                                                    I'm not trying to claim i'm some fucking god , i'm saying

                                                                    HEY THE BACKDOOR TO THE VAULT IS OPEN. CLOSE IT
                                                                    Don't get me wrong Smokey... I was just adding my 2 cents & commenting on why such security issues would exist within this application.

                                                                    I wasn't trying to make light of what you said/or know at all. I know you know more than the average bear

                                                                    Comment

                                                                    • SmokeyTheBear
                                                                      ►SouthOfHeaven
                                                                      • Jun 2004
                                                                      • 28609

                                                                      #35
                                                                      Originally posted by goBigtime
                                                                      Don't get me wrong Smokey... I was just adding my 2 cents & commenting on why such security issues would exist within this application.

                                                                      I wasn't trying to make light of what you said/or know at all. I know you know more than the average bear
                                                                      yup . 90% of the issues can be found in one way or another on the vb site
                                                                      hatisblack at yahoo.com

                                                                      Comment

                                                                      • boneprone
                                                                        Hall Of Fame
                                                                        • Jan 2001
                                                                        • 34415

                                                                        #36
                                                                        lol..

                                                                        He said gfylite.

                                                                        Industry Hall Of Fame Legend Mike Jones
                                                                        Bow to the Power - Still BP4L
                                                                        http://gfyawards.com/hall-of-fame
                                                                        Learn about it kids.

                                                                        Comment

                                                                        • psyko514
                                                                          See sig. Join Epic Cash.
                                                                          • Oct 2002
                                                                          • 22366

                                                                          #37
                                                                          Originally posted by SmokeyTheBear
                                                                          *blushes.. i did not...

                                                                          Turn on your icq for a sec.
                                                                          I'm not at home right now... I'm celebrating my girlfriend's bday

                                                                          Hit me up tomorrow, or email me: psyko514(at)gmail.com


                                                                          Bad Girl Bucks
                                                                          - 50% Revshare through CCBill.
                                                                          Promote BrandyDDD, Pixie's Pillows, Action Allie and more!

                                                                          Phoenix Forum Pics | Webmaster Access Montreal pics
                                                                          email: psyko514(a)gmail.com | icq: 214-702-014

                                                                          Comment

                                                                          • goBigtime
                                                                            Confirmed User
                                                                            • Nov 2002
                                                                            • 7761

                                                                            #38
                                                                            Originally posted by SmokeyTheBear
                                                                            yup . 90% of the issues can be found in one way or another on the vb site
                                                                            All I can say is that if I was in the position that Lens is in with this place... I would make damn sure the VB shit was constnatly in check security wise - with a few other security provisions made to the web servers, db server, and the network - just in case something were to ever slip by.

                                                                            Comment

                                                                            • pornguy
                                                                              Too lazy to set a custom title
                                                                              • Mar 2003
                                                                              • 62910

                                                                              #39
                                                                              I think that wheh you have a money maker such as GFY you shlould give it a little more attention. But then some people still have it in their heads, not to finx thinga that aint broke. At least it aint broke in their eyes.

                                                                              Banners still show, a threads are added, and responses are added.
                                                                              PornGuy skype me pornguy_epic

                                                                              AmateurDough The Hottes Shemales online!
                                                                              TChicks.com | Angeles Cid | Mariana Cordoba | MAILERS WELCOME!

                                                                              Comment

                                                                              • polish_aristocrat
                                                                                Too lazy to set a custom title
                                                                                • Jul 2002
                                                                                • 40377

                                                                                #40
                                                                                Originally posted by psyko514
                                                                                I'm not at home right now... I'm celebrating my girlfriend's bday

                                                                                Hit me up tomorrow, or email me: psyko514(at)gmail.com

                                                                                You're celebrating her b-day and still posting here? LOL
                                                                                I don't use ICQ anymore.

                                                                                Comment

                                                                                • colpanic
                                                                                  Confirmed User
                                                                                  • May 2004
                                                                                  • 1007

                                                                                  #41
                                                                                  Back in the day I was a software engineer, at a search engine company. Search is hard on large sets of data.

                                                                                  I don't know anything about vBulliten or whatever this site runs on, but I'll bet a dollar that the searches are just standard PHP scripts querying a SQL database. You aren't going to make that scale without some serious hardware. It's the wrong way to go. Way too much data gets pushed through this board.

                                                                                  If anyone here actually has the authority to try and fix search, I'd be willing to give some advice and maybe try to put some software up.

                                                                                  Don't waste your time writing another PHP script.. it's not gonna work. If you REALLY want to fix search, either use this:

                                                                                  http://jakarta.apache.org/lucene/docs/index.html

                                                                                  Or hell, you could probably rig up Google Desktop Search to scan the pages if you exported them to text That would be a total hack, but it would be a lot faster than a SQL query!

                                                                                  (Ok, don't really do that... Use Lucene.. it's the only way to fly).

                                                                                  Or, hire me! I'll make it work for 10k
                                                                                  I like ducks.

                                                                                  Comment

                                                                                  • goBigtime
                                                                                    Confirmed User
                                                                                    • Nov 2002
                                                                                    • 7761

                                                                                    #42
                                                                                    Originally posted by colpanic


                                                                                    Don't waste your time writing another PHP script.. it's not gonna work. If you REALLY want to fix search, either use this:

                                                                                    http://jakarta.apache.org/lucene/docs/index.html

                                                                                    Or, hire me! I'll make it work for 10k



                                                                                    Search functions in VB has been streamlined for some time. Sites as big as GFY with a large base of tech savvy users should also make other provisions to protect themselves against DOS attacks on more resource intensive operations.

                                                                                    This isn't really a problem with VB, PHP/MySQL or even the size of GFY's archive... for the amount of money the place brings in, it could be easily resolved within a few days (with the right tech people of course).

                                                                                    But the first thing to do, as Smokey suggeted, would be to bring the scripts up to date security wise (and no, this doesn't mean go to VB3.x)

                                                                                    If it were me and the archive was as large as GFY's... I might make sure that searching & general forum use were completely independent on the backend.

                                                                                    That way if some fucker wants to attack the board via search... fine.. but you're only going to cripple the search feature during your attack - not the whole board.

                                                                                    Many other combinations of software an and networking things could be done as well. But whatever.
                                                                                    Last edited by goBigtime; 10-16-2004, 12:47 PM.

                                                                                    Comment

                                                                                    • colpanic
                                                                                      Confirmed User
                                                                                      • May 2004
                                                                                      • 1007

                                                                                      #43
                                                                                      Sure.

                                                                                      I wasn't suggesting a solution to the DOS problem.. A seperate set of boxes is the way to fly for that.

                                                                                      I was addressing the problem that search is slow as balls when it DOES work , which is because the way searches are run is inefficient. (this makes it easier to DOS too)

                                                                                      Fast search at a minimum requires reverse indexes, which is the opposite of what SQL does.. (short explanation: normal SQL search would scan each post for the word "dog", causing every post to be read during a search... a reverse index would build an index of each word.. so when you search for dog it would just go look up that word in the hash, and return all the pages in the index)


                                                                                      Or are you saying that this stuff is taken care of already by the vBulliten search if GFY just configured it properly?
                                                                                      I like ducks.

                                                                                      Comment

                                                                                      • ztik
                                                                                        Confirmed User
                                                                                        • Aug 2001
                                                                                        • 5196

                                                                                        #44
                                                                                        there is a hack for this board that disables the search feature when it is under too much load or too many people are using it

                                                                                        also new versions of this board have better indexing and thread searching the problem could be easily soved
                                                                                        .

                                                                                        Comment

                                                                                        • pussyluver
                                                                                          Clueless OleMan
                                                                                          • Mar 2003
                                                                                          • 11009

                                                                                          #45
                                                                                          Smokey, Do you consult? Rates?

                                                                                          Comment

                                                                                          • goBigtime
                                                                                            Confirmed User
                                                                                            • Nov 2002
                                                                                            • 7761

                                                                                            #46
                                                                                            Originally posted by colpanic

                                                                                            Or are you saying that this stuff is taken care of already by the vBulliten search if GFY just configured it properly?
                                                                                            I'm pretty sure there were some imvprovemtns recently to the way the search function works in VB.

                                                                                            They might only apply for VB3.x though.

                                                                                            Comment

                                                                                            • malakajoe
                                                                                              Confirmed User
                                                                                              • Feb 2003
                                                                                              • 1751

                                                                                              #47
                                                                                              I have already given a (possible) solution. No bullshit...straight technical fix.

                                                                                              http://www.gofuckyourself.com/showth...adid=373026&s=

                                                                                              FreeBSD needs to be configured for better MySQL performance. Do this and late VB releases..and easy as that.
                                                                                              Last edited by malakajoe; 10-16-2004, 04:22 PM.
                                                                                              Selfpleasure.com for sale on auction. Closes on Tuesday March 11th at 9pm PST!!!!

                                                                                              Dirty enough to be good, but clean enough for everyone!
                                                                                              ------------------------------------------------------------------

                                                                                              Moral Police - First graduating class coming soon! - Forcing our values across the internet

                                                                                              Comment

                                                                                              • uchase/webpry
                                                                                                So Fucking Banned
                                                                                                • Aug 2004
                                                                                                • 2085

                                                                                                #48
                                                                                                Originally posted by SmokeyTheBear
                                                                                                It seems strange that gfy cannot keep its search feature working very long. The board is huge and it obviously uses alot of resources to keep it backed up, but i think it should be easier once you upgrade the script, ( and im not sure what is holding you back )

                                                                                                With the enormous amount of webmasters on this board, im sure someone can help gfy get things fixed.

                                                                                                I have created a simple app that checks gfy on a timer for the latest 50 threads. It displays the top 50 threads in a small window. You can set triggers for certain words you may wish to track in a thread title. When it detects a thread to be tracked it pops up a window with an internal browser to view and respond to the thread.

                                                                                                Very usefull for going to sleep and waking up to find your tracked threads waiting for you to respond.

                                                                                                When i initially made this program i added alot of features that i have since disabled , due to the negative effect it could have on gfy.

                                                                                                --- An Autoresponder for threads ( this could be abused )
                                                                                                --- Tracking by post not just by thread title ( this uses up mega gfy resources , but im working on a simpler version )
                                                                                                --- A login structure ( not sure if lens would like this or if many would trust this )

                                                                                                I dont want to release this program if gfy is completely opposed to the idea, or if gfy plans to upgrade anytime in the near future..

                                                                                                Any other features that you would like to see, please respond.

                                                                                                Some important notes...

                                                                                                GFY LOGIN SCRIPT IS UNSECURE !!!
                                                                                                GFY PROFILES ARE UNSECURE !!!

                                                                                                When running a program i designed to check my own board for vulnerable passwords, i found THOUSANDS of vulnerable passwords on gfy.

                                                                                                Because i dont have access to the gfy admin account ( cough cough ) it is not capable of informing users by email to change their passwords. But if lens ( or another gfy employee ) would simply run this program you could save yourself some future problems...
                                                                                                ... funny all this shit coming from the c unt that refbombed jayxxx !!!

                                                                                                Comment

                                                                                                • raymor
                                                                                                  Confirmed User
                                                                                                  • Oct 2002
                                                                                                  • 3745

                                                                                                  #49
                                                                                                  Originally posted by pussyluver
                                                                                                  Do ya blame vBulletin for the security issues or adult.com for setup of servers and the program?

                                                                                                  Both, plus PHP's documentation regaridng sessions.
                                                                                                  vBulletin patched up some of the major issues in a way that
                                                                                                  at least makes it harder to exploit, if you use the default settings.
                                                                                                  The admin for the relevant settings don't mention that
                                                                                                  by changing the settings you open yourself wide open
                                                                                                  to easy attacks where the attacker can take over the admin account.
                                                                                                  Just to demonstrate, I did just that on another major webmaster board.
                                                                                                  I made a post that when read by the forum admin
                                                                                                  gave me admin privileges.
                                                                                                  Lens should have this shit fixed, that's on him.
                                                                                                  But on the other hand he probably has as hard a time as
                                                                                                  anyone else finding qualified programmers who know shit
                                                                                                  about security, search, or relational database.

                                                                                                  I very respectfully disagree a little, perhaps, with colpanic.
                                                                                                  If not with what he said, with what he implied.
                                                                                                  SQL products such as MySQL can certainly do full text
                                                                                                  searches of large datasets very quickly,
                                                                                                  but the database needs to be set up right to do that.
                                                                                                  MySQL provides a totally transparent "fulltext" index that
                                                                                                  would go a LONG way in that respect.
                                                                                                  Then certain other columns that are not indexed
                                                                                                  by default in VB need simple indexes.
                                                                                                  I would suggest that the MySQL code, with the appropriate
                                                                                                  idexes and all, would be a lot faster then the Java ( )
                                                                                                  solution he mentioned.

                                                                                                  Now if Lens paid us each a couple hundred bucks, as a team
                                                                                                  we could have it working nicely very quickly.
                                                                                                  For historical display only. This information is not current:
                                                                                                  support@bettercgi.com ICQ 7208627
                                                                                                  Strongbox - The next generation in site security
                                                                                                  Throttlebox - The next generation in bandwidth control
                                                                                                  Clonebox - Backup and disaster recovery on steroids

                                                                                                  Comment

                                                                                                  • Lensman
                                                                                                    GFY Chaperone
                                                                                                    • Jan 2001
                                                                                                    • 9846

                                                                                                    #50
                                                                                                    Originally posted by BradM
                                                                                                    So what? This place has about 40 advertisers paying 3 grand a month

                                                                                                    Dont fucking tell me they cant fire some fag intern to moderate this board. They could hire a fulltime employee JUST on what we pay in advertising on this board.

                                                                                                    He doesnt care, because the more threads like this that happen = more pageviews = more $.

                                                                                                    It's a horrible way to run a business.
                                                                                                    From http://www.gofuckyourself.com/gfy_faqs.html

                                                                                                    4. GFY Haters... If you are a GFY Hater, don't go away mad, just go away. You want to hate on GFY, go do it somewhere else. Plain and simple

                                                                                                    We'll all be happy to see you gone.

                                                                                                    Comment

                                                                                                    Working...