Avatar

[redsn0w]

The feature was removed due to an exploit involving avatars. Only older users (such as myself) have them.

Where can I see how that exploit worked? I'm interested because I don't want the same happening to me when I develop a web platform.

This is the payload :

https://gist.githubusercontent.com/super3/6802808/raw/4af8de8037a7079d30236c608e1247370849f585/gistfile1.txt

and this is the video :

https://www.youtube.com/watch?v=LKrOHAfMdxI

and here an article :

http://www.coindesk.com/bitcointalk-forum-hacked-hole-seekers/

[1715141148]

1715141148

[1715141148]

1715141148

[R2D221]

This is the payload :

https://gist.githubusercontent.com/super3/6802808/raw/4af8de8037a7079d30236c608e1247370849f585/gistfile1.txt

So, if I insert this file using an <img> tag, will I get all these flashy things? I don't seem to understand.

[redsn0w]

This is the payload :

https://gist.githubusercontent.com/super3/6802808/raw/4af8de8037a7079d30236c608e1247370849f585/gistfile1.txt

So, if I insert this file using an <img> tag, will I get all these flashy things? I don't seem to understand.

No , I don't think.  (I think)The hacker/s have inject the code into an image and after uploaded this image as avatar.

[R2D221]

This is the payload :

https://gist.githubusercontent.com/super3/6802808/raw/4af8de8037a7079d30236c608e1247370849f585/gistfile1.txt

So, if I insert this file using an <img> tag, will I get all these flashy things? I don't seem to understand.

No , I don't think.  (I think)The hacker/s have inject the code into an image and after uploaded this image as avatar.

OK, but how was this “image” run, then?

[krigger]

What is the situation with being unable to change the profile avatar at this time?

I dont see why is it important at all?
Avatar is just a picture which represents nothing.
As it is a serioius forum I think that avatar is not good idea as anyone can upload picture by its own choice which can be rude, nude or sick. And banning a preson because of avatar is funny too. Thats why there is no avatar.

[R2D221]

What is the situation with being unable to change the profile avatar at this time?

I dont see why is it important at all?
Avatar is just a picture which represents nothing.
As it is a serioius forum I think that avatar is not good idea as anyone can upload picture by its own choice which can be rude, nude or sick. And banning a preson because of avatar is funny too. Thats why there is no avatar.

I have argued in other thread that avatars make easier to identify different people, since our brains process images faster than text.

[redsn0w]

This is the payload :

https://gist.githubusercontent.com/super3/6802808/raw/4af8de8037a7079d30236c608e1247370849f585/gistfile1.txt

So, if I insert this file using an <img> tag, will I get all these flashy things? I don't seem to understand.

No , I don't think.  (I think)The hacker/s have inject the code into an image and after uploaded this image as avatar.

OK, but how was this “image” run, then?

I've find a great thread here in the forum : https://bitcointalk.org/index.php?topic=306878.0

[hilariousandco]

What is the situation with being unable to change the profile avatar at this time?

I dont see why is it important at all?
Avatar is just a picture which represents nothing.
As it is a serioius forum I think that avatar is not good idea as anyone can upload picture by its own choice which can be rude, nude or sick. And banning a preson because of avatar is funny too. Thats why there is no avatar.

I have argued in other thread that avatars make easier to identify different people, since our brains process images faster than text.

This is true, though scammers could capitalise on this and that's why it might be a good idea limiting avatars to higher ranks than Newbies. NSFW avatars likely won't be allowed though.

[R2D221]

I've find a great thread here in the forum : https://bitcointalk.org/index.php?topic=306878.0

Thanks, this is very helpful.

[redsn0w]

I've find a great thread here in the forum : https://bitcointalk.org/index.php?topic=306878.0

Thanks, this is very helpful.

You are welcome, I hope to see again the possibility to upload or better use an avatar in the new forum software.