Currently, a bunch of accounts are compromised due to hidden linking. I'm making this topic to make a reference on who all got compromised. If you're viewing this topic and your account was compromised, then the best thing I'd recommend is to just make a new account for now.
when you say "these people" you don't even know who you are talking about. i know exactly who they are, what they know and where they got their information
I think you know a lot less than you think you know by your original comment about "post" requests. Probably someone's been feeding you misinformation.
when you say "these people" you don't even know who you are talking about. i know exactly who they are, what they know and where they got their information
deletedalmost 10 years
ok i get you are like infinitely superior when it comes to scripting language but you clearly don't know what people are (were) capable of doing on this website just by loading a page
I mean it's pretty obvious that these people don't have any knowledge about that or they wouldn't be resorting to phishing tactics, which, by the way, could easily be countered.
ok i get you are like infinitely superior when it comes to scripting language but you clearly don't know what people are (were) capable of doing on this website just by loading a page
deletedalmost 10 years
i mean just imagine me falling for that pm
Well with that comment you made earlier it wouldn't surprise me at all.
it's actually a combination. the site uses "post" meaning you can use the java console to do all sorts of crap
it's how prevail fkd with my account I think
I mean, the entire internet pretty much runs on javascript, which would be why you can use the developer console to do "all sorts of crap" but that's all client side and has nothing to do with your account being compromised. And the site having users send requests with the "post" header has absolutely nothing to do with anything. You probably just fell for one of these dumbo pm tricks.
mostly right, except em is probably the only site where you can inject javascript just about anywhere and lucid lets you link accounts without any real security (like entering the current user's password or making sure the request referrer is /user/alternates)
i know of like 3 ways you can still run js unfiltered for all users who load the lobby page although i didnt find them myself
it's actually a combination. the site uses "post" meaning you can use the java console to do all sorts of crap
it's how prevail fkd with my account I think
I mean, the entire internet pretty much runs on javascript, which would be why you can use the developer console to do "all sorts of crap" but that's all client side and has nothing to do with your account being compromised. And the site having users send requests with the "post" header has absolutely nothing to do with anything. You probably just fell for one of these dumbo pm tricks.
Tbh fam, being negative to girls just gets you negged