Home.... | log in.... | Pub my question! | Sign-up....

Java-index >> Java Essentials >> Java Programming

links on the forums

so they disabled links, and were going to reenable them "in the next day".does any one have any experience with how long "in the next day" usually takes?

[167 byte] By [mkoryaka] at [2007-11-27 8:33:19]

«« How to force authentication to the next login module group in pass-thru
»» Black blank screen after Recommended Cluster install

# 1

> does any one have any experience with how long "in> the next day" usually takes?A few months maybe?

CaptainMorgan08a at 2007-7-12 20:29:25 >

top of Java-index,Java Essentials,Java Programming...

# 2

I suspect when the next round of fixes is put it in it will be looked at.

Aknibbsa at 2007-7-12 20:29:26 >

# 3

Is this due to pictures in the links?

robtafta at 2007-7-12 20:29:26 >

# 4

> Is this due to pictures in the links? Not the main problem. The real problem was that our "Forum Settings" where being updated without our knowledge. Although personally I don't think it was a big deal and would rather have the "linking" working properly.

camickra at 2007-7-12 20:29:26 >

# 5

I suspect there major issue would be more of the personal information being shared that would be the problem, such as e-mail address, as I am certain they have a privacy policy that they must adhere to.

Aknibbsa at 2007-7-12 20:29:26 >

# 6

> > Is this due to pictures in the links? > Not the main problem.But it's a good enough reason on its own. Most of the pictures that were posted were pretty funny, but once the first hardcore troll discovered that exploit, the party was over.

uncle_alicea at 2007-7-12 20:29:26 >

# 7

> Is this due to pictures in the links?Yes.

cotton.ma at 2007-7-12 20:29:26 >

# 8

> > Is this due to pictures in the links?

> Not the main problem. The real problem was that our

> "Forum Settings" where being updated without our

> knowledge. Although personally I don't think it was a

> big deal and would rather have the "linking" working

> properly.

The forum settings change was a symptom of the exploit allowing arbitrary urls pretending to be images be imbedded in links.

I would suspect that one of if not the reason that this feature was yanked was because I had sent them several feedbacks and had an email conversation about the fact that among other things the exploit could be used to unprivatize information in your profile in order to steal it as well as infect browsers with viruses, spyware and other such unpleasantries.

Having said all that I do not understand what is so difficult about simple tags. All they have to do is scrap the URL tag but use regex to find http://something.com and turn it into a link. It's not exactly rocket science.

cotton.ma at 2007-7-12 20:29:26 >

# 9

I reported abuse when I came across a link that caused "me" to post another post on the thread when I hadn't clicked on the link at all, all I did was access the thread. (The means of that is magic to me.)

I am rather certain that functionality could be used for more than just posting funny pictures.

Historically when the forum admins upgrade the forum software they ALWAYS mess up the linkage usually resulting in javascript enabled postings (or whatever they are.)

Traditionally picture posting was specifically disabled, and the only thing allowed is just urls.

I suspect this is simply what happened again - there was forum upgrade recently. They didn't intend to allow picture posting. They just don't know what they are doing and everything was turned on. It usually takes them a while to figure how to correctly enable the forum. It remains to be seen if they will even bother this time.

jschella at 2007-7-12 20:29:26 >

# 10

> I suspect this is simply what happened again - there

> was forum upgrade recently. They didn't intend to allow

> picture posting.

No, this time the problem was due, not to something the admins did (turn on the embedded HTML feature), but to something they didn't do (fix two very serious, long-standing bugs in the forum software). But, if they ever do get around to rolling out a fix, you can be sure they'll turn on a bunch of annoying bells and whistles at the same time.

uncle_alicea at 2007-7-12 20:29:26 >

# 11

>if they ever do get around to

> rolling out a fix, you can be sure they'll turn on a

> bunch of annoying bells and whistles at the same time.\

My all-time favourite is the intermittently introduced auto-watch-on-every-post-you-make-bug such that watches are turned on for every thread, forum and post you have ever made.

So then we know when jverd signs in in the morning because the whole forum crashes.

Good times. Good times.

cotton.ma at 2007-7-12 20:29:26 >

Java programming resources: FAQs, tutorials, compiler and browser download sites, documentation, books lists, IDEs, etc.

links on the forums

Java Essentials New Topic

Java Essentials Hot Topic

Java Essentials

All Classified