[Shockley]

Thanks for letting us know OMni. Definitely made me feel more safe about my forum

I am really enjoying your forum, Most Savage. 👍

[Sharjah]

I am really enjoying your forum, Most Savage. 👍

Why dont u register u lurking fuck?? 😠

[ᴘʜᴀɴᴛᴏᴍ]

Thanks for the update Omni
I think this prevent a lot of threads about this

[BlaqCat]

3. Don't use the same password on HF anywhere else. This is seriously important.
I dont use the same password for any same site because that is common sense, but you made it stick out; so I ask, is there a security risk as in people try to get the passcodes of hf members allot?

[Benjamin Franklin]

For those who want additional security, web extensions like ScriptSafe (on Google Chrome) and NoScript (Firefox) can help prevent these kind of "exploits". Maybe not at 100%, but when well used, they can stop a lot of script-based exploits.

Thank you for the heads up Omni.

I always use NoScript. Best extension on FireFox.

[Mimix]

Let the asslicking begin!

"Thank you omni, may i kiss you ass now for the ass kisser award?"

[Oak]

I'm a bit confused about the nature of the exploit but I guess I won't worry. Thanks for the heads-up though, glad I will be aware if / when it hits the news.

[adampelletgun]

Thanks for the heads up.

Another few tips:

1. Never click coded hyperlinks from members. Always quote the PM/post to see the URL.
2. Never click hidden links. Links such as goo.gl. There are online tools out there that you can use to unmask these links.

[Noire Dragon]

I'm a bit confused about the nature of the exploit but I guess I won't worry. Thanks for the heads-up though, glad I will be aware if / when it hits the news.

XSRF I believe basically does on site functions such as posting a message or private messaging someone via a script on a remote site if you're logged in on the target site depending on the exploit it could be worst than posting a message.

['An0ny]

Thanks for the heads up.

Another few tips:

1. Never click coded hyperlinks from members. Always quote the PM/post to see the URL.
2. Never click hidden links. Links such as goo.gl. There are online tools out there that you can use to unmask these links.

For goo.gl you can just add a + sign behind the link, example, http://goo.gl/aEhE+

I'll defiantly not open links, hopefully booters dosen't use this exploit.. that would be bad lol

---

Let the asslicking begin!

"Thank you omni, may i kiss you ass now for the ass kisser award?"

you may want to shut the fuck up and try better next time 🤐

[Ahri]

3. Don't use the same password on HF anywhere else. This is seriously important.

Sad part is I totally forgot my password, my web browser stays logged in 24/7. Anyways tonight I will be 2 factor security on my remaining 3+ emails and accounts. Probably should try to remember what password is.

[Simply™]

K I'll try. It's hard to hack my account since my username has modded characters + I have an original/hard password.

[Ahri]

K I'll try. It's hard to hack my account since my username has modded characters + I have an original/hard password.

You know they can always use your email instead of the username...

[STR™]

Thank you for the heads up Omni Sir , will follow your command

[Noire Dragon]

You know they can always use your email instead of the username...

They shouldnt be able to get/change the password via the xsrf bug anyway you should be safe.