Bitcoin Forum

Other => Meta => Topic started by: ruski on April 27, 2013, 07:56:47 AM



Title: Ignore list is wrong???
Post by: ruski on April 27, 2013, 07:56:47 AM
I only have two people on my ignore list.

But now three others seem to be on it for no apparent reason. I went to my settings, removed them and saved it, and they came right back. I tried the unignore buttons and it unignored one of them at a time, when I unignored the other, the first was ignored again.

What the hell?? I don't want to ignore these people? Some help?


Title: Re: Ignore list is wrong???
Post by: Transisto on April 27, 2013, 07:59:24 AM
My ignore list is a mile long and I never had any issue with that.

Maybe try more.


Title: Re: Ignore list is wrong???
Post by: drakahn on April 27, 2013, 08:01:29 AM
was it
smoothie
arepo
BitPirate

by any chance? these three got added to my ignore list and i don't ignore anybody, it was strange to see "this user is ignored"


Title: Re: Ignore list is wrong???
Post by: ruski on April 27, 2013, 08:03:11 AM
Yes it was.

It's a forum exploit that was used by somebody. Mods please ban this person, it has been reported.


Title: Re: Ignore list is wrong???
Post by: drakahn on April 27, 2013, 08:04:12 AM
I see it now, damn eh

edit: and someones quoted it


Title: Re: Ignore list is wrong???
Post by: NikolaTesla on April 27, 2013, 08:06:54 AM
Probly should ban the person (BitPirate) who created a thread suggesting to all others a list of people to ignore.


Title: Re: Ignore list is wrong???
Post by: John (John K.) on April 27, 2013, 08:13:09 AM
Probly should ban the person (BitPirate) who created a thread suggesting to all others a list of people to ignore.

No, that is well within the bounds of freedom of speech here. Exploiting code on the other hand...


Title: Re: Ignore list is wrong???
Post by: ruski on April 27, 2013, 08:13:16 AM
Kudos for a smart piece of work though, Nikola, even if you are a cockhead.


Title: Re: Ignore list is wrong???
Post by: John (John K.) on April 27, 2013, 08:14:26 AM
Awesome find on the exploit though.   ;)


Title: Re: Ignore list is wrong???
Post by: theymos on April 27, 2013, 09:15:27 PM
NikolaTesla exploited a simple cross-site request forgery attack that the ignore user mod was weak to. SMF is usually decently well-protected against this sort of thing, but this mod was not. I fixed it earlier today. If you ignored smoothie, arepo, or BitPirate in the last ~day, your ignore might have been deleted.


Title: Re: Ignore list is wrong???
Post by: pekv2 on April 28, 2013, 12:53:04 AM
Cool exploit indeed. Glad it was found and fixed. Thanks, to theymos for putting attention to it and who ever found out it was an exploit, only makes the forum stronger :).