Hack Forums
Huge Security Issue - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: Huge Security Issue (/showthread.php?tid=5092957)



Huge Security Issue - _r00t - Dec 13, 2015

Hello Omni and Readers,
I have discovered in issue within the HackForums Real-Time Chatbox UserScript

A simple edit allows users to impersonate others, Take this:

I thought I was talking to froggy in the shoutbox but it turns out it isnt her,
She made a thread:
https://hackforums.net/showthread.php?tid=5092753

I made this GIF. The Chatbox user links to her profile, has her name and avatar, but it is not her.
[Image: 198130689c1ca3bc41c623c79bcf7b41.gif]

Omni, Please implement Real-Time User Script Blocking

Cheers


* - Queen Cin - Dec 13, 2015

Woah, nice find. Never caught that.


* - brian188246 - Dec 13, 2015

This is a 3rd party script which Omni isn't involved with.

Is there a way to block these scripts? I know Omni said he wishes he could.


* - Light - Dec 13, 2015

I've used the real-time chatbox a few times and everytime their would be obvious impersonators such as people pretending to be Omniscient.

However this is a 3rd party script and Omniscient has nothing to do with this project.


* - Retribute - Dec 13, 2015

Another reason for Omniscient to find userscripts more of a nuisance.


* - daymon - Dec 13, 2015

(Dec 13, 2015 12:44 PM)Productivity Wrote:  However this is a 3rd party script and Omniscient has nothing to do with this project.

This, you have to talk with the creator of the script.


* - ⁠Cammy - Dec 13, 2015

I found the solution for this problem

Don't use it


* - Omniscient - Dec 13, 2015

Quote:Omni, Please implement Real-Time User Script Blocking


I can't block what software you install on your computer. I can't make members smart.

Quote:However this is a 3rd party script and Omniscient has nothing to do with this project.


Exactly.

Stop using unofficial software that alters your HF experience. You risk a great deal.