Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Ruski]

well, there aren't many code-monkeys here, but actually this version of the message board has some security vulnerabilities that can be exploited if you try hard enough and play with the fonts.

-RuskiFace teh Priate

[AJStarhiker]

Oh, really?

[Ruski]

Yea. nothing too special, but; for example:
by playing with the glow tags, I can download or modify cookies from your computer.

*shrug*

-RuskiFace the Pirate

[AJStarhiker]

huh.  good thing I'm not using my own computer, then.

[Ruski]

well, there's not really much information there anyways.
I mean... if anything, I could pull up a couple of e-mail addresses and passwords I suppose, but really; reading other people's mail is so dull. and most people don't have their spam filters set up right, so I'd have to waste an hour fixing the e-mail account before I could even be bothered to go through it.
from there, it's a long shot to find record of a credit card purchase, and go to the site that you ordered it from, and modify the order to ship to a blank PO box, or just get the credit card numbers if they are listed. (most sites don't, but some do)

thoes are all very real connections, but it's so much work; it's typically not worth the effort.

-RuskiFace the Pirate

[AJStarhiker]

...wow.  I'm glad I don't tend to make internet purchases.  Off course, that kind of goes hand in hand with wanting to examine things before I buy them.  I like knowing what I'm getting.

[Ruski]

Yup. but seeing as how you are sitting on a public school computer, I could probibly grab a cool dozen e-mail address cookies off of there. and one or two of them could have 'remembered' the password on accident.
I wouldn't even necessarily be stealing YOUR information, just info off of the system you are on.

-Ruski

[Gabriel]

You know, Ruski, sometimes you are a scary cobber.

Gabriel

[AJStarhiker]

At least it isn't mine...and I haven't done anything that would really be 'sensitive' on  here.  Mostly posting at the pub and checking fanfic sites.  I keep all my personal files on USB, not the network.  Makes it easier to transfer to my home computer.

[Ruski]

physically hacking the network to get to your files (USB or otherwise) would be a lot more work.

just stealing the cookies, and using that to access online information is much easyer.

and I'm sory if i'm scary,... but I gott do something to keep up with the razor-boys and wire-reflex junkies.

-RuskiFace the Pirate

[ROOTless]

Yea. nothing too special, but; for example:
by playing with the glow tags, I can download or modify cookies from your computer.

OK, that you gotta show me how!
No, I don't plan to use it, ofcourse, but it's the sort of fun little tit-bit that's liven up my day.

[Ruski]

ask and you shall receve:

Code: [Select]

[glow=red);background:url(javascript:script_code);filter:glow(color=red,2,300]Text[/glow]


basicly, it uses java to hide evil commands inside the 'glow' ability of the java applet.

because it's the website you asked to look like, it bypasses the security features built into your browser and firewall. (goes in under port 80) all you'll be able to hit is the normal stuff java can get into, the only really interesting bit is the cookies, that can give you a trail to treasure, mostly if you copy the cookies into your own directory, and the session hasn't expired, you can 'log into' mail servers pretending to be the authorised computer.

from there, you can work your nefarious ways on their e-mail accounts, e-mail their family members porn, or check to see if there is any online purchacing reciepts you can get into.

and that's that.

-RuskiFace the Pirate

they fixed the bug in the more recent versions of YaBB

[AJStarhiker]

huh.  Interesting

[Jester]

hmmm...

[Gabriel]

Pad, pad, pad.... Gotta get tha post-count back up after the purge.

Gabriel