User not logged in - login - register
Home Calendar Books School Tool Photo Gallery Message Boards Users Statistics Advertise Site Info
go to bottom | |
 Message Boards » » Someone wrote a TWW virus Page 1 [2] 3, Prev Next  
aaronburro
Sup, B
53063 Posts
user info
edit post

hey moron, just FYI... I tried putting the

tag in my status name, and TWW won't let me do it. tried a couple other tags and it doesn't work. unless I'm an idiot, I don't think it'll let you put a tag in there.

also, NerdChick's timestamp is always blue because she always adds HTML code at the end of her posts that makes the following text blue, but she never terminates the code, so it carries through to the timestamp.

7/30/2007 2:00:40 AM

Ansonian
Suspended
5959 Posts
user info
edit post

2

7/30/2007 2:01:38 AM

drunknloaded
Suspended
147487 Posts
user info
edit post

^^^woah how did u do that in like 2.5 minutes!

[Edited on July 30, 2007 at 2:16 AM. Reason : .]

7/30/2007 2:16:17 AM

qntmfred
retired
40726 Posts
user info
edit post

im in ur wolfwebz

countin ur virii

7/30/2007 2:25:24 AM

amac884
All American
25609 Posts
user info
edit post

gg

7/30/2007 2:46:46 AM

BigMan157
no u
103354 Posts
user info
edit post

regex replace all user html eventlisteners

7/30/2007 9:14:15 AM

terpball
All American
22489 Posts
user info
edit post

The Dude is spreading that shit now

7/30/2007 10:21:58 AM

Specter
All American
6575 Posts
user info
edit post

Disable HTML until all the threads are deleted.

7/30/2007 10:25:04 AM

El Nachó
special helper
16370 Posts
user info
edit post

or...you know...just delete all the threads.

7/30/2007 10:29:12 AM

Str8BacardiL
************
41753 Posts
user info
edit post

^

7/30/2007 10:57:31 AM

qntmfred
retired
40726 Posts
user info
edit post

haha they should suspend Jere 1 day for every virus thread created

and then kick him in the balls

7/30/2007 11:01:57 AM

El Nachó
special helper
16370 Posts
user info
edit post

they should suspend Jere 1 day year for every virus thread created

[Edited on July 30, 2007 at 1:03 PM. Reason : and then kick him in the balls]

7/30/2007 1:03:02 PM

TreeTwista10
minisoldr
148439 Posts
user info
edit post

what a pain in the ass

7/30/2007 1:13:19 PM

Prospero
All American
11662 Posts
user info
edit post

Quote :
"Disable HTML until all the threads are deleted."


Quote :
"or...you know...just delete all the threads."

7/30/2007 5:57:13 PM

Specter
All American
6575 Posts
user info
edit post

Quote :
"or...you know...just delete all the threads."

Can't happen. Mods can only police their own forums and FF and SH are currently unpoliced. Any premies looking at threads in there will start it back up again. Deleting the threads won't do any good unless CrazyJ does it himself. All the premies can suck it up and give up their HTML for the time being.

With great power comes great responsibility.

[Edited on July 30, 2007 at 7:16 PM. Reason : Also, Specter for Study Hall mod]

7/30/2007 7:15:08 PM

NCSUStinger
Duh, Winning
62450 Posts
user info
edit post

how do you turn off JS in IE?

7/30/2007 8:03:15 PM

qntmfred
retired
40726 Posts
user info
edit post

Quote :
"With great power comes great responsibility"


LOOKING AT YOU CRAZYJ

7/30/2007 8:08:25 PM

El Nachó
special helper
16370 Posts
user info
edit post

Quote :
"Deleting the threads won't do any good unless CrazyJ does it himself. All the premies can suck it up and give up their HTML for the time being."


Just who in the hell do you think would have the permissions to disable HTML anyway?

7/31/2007 5:19:19 PM

LimpyNuts
All American
16859 Posts
user info
edit post

I think i have a solution

7/31/2007 7:37:55 PM

XSMP
All American
16674 Posts
user info
edit post

don't elaborate so much, Limpy, you might confuse us

7/31/2007 7:39:54 PM

LimpyNuts
All American
16859 Posts
user info
edit post

post this in the offending threads

<img style="position:absolute;left:0;top:0" src="gopher:/" onError="history.go(-1);"><font style="size:36pt;color:blue;font-weight:bold">VIRUS MOTHER FUCKING NEUTRALIZED!

LimpyNuts, FTW</font>

7/31/2007 8:21:15 PM

Lowjack
All American
10491 Posts
user info
edit post

gg

7/31/2007 10:23:39 PM

NCSUStinger
Duh, Winning
62450 Posts
user info
edit post

i dont think that works, i just clicked one and got jacked up

7/31/2007 10:27:30 PM

Lowjack
All American
10491 Posts
user info
edit post

Probably loads the elements in order and executes the scripts in order. Need to find some way to preempt the other one.

http://www.tobymiller.com/articles/javascript/does_javascript_load_on_page_load_or_on_onload.php

Quote :
"IE 6.0.29 (Windows XP)

All html source code is downloaded.
All external source code elements are downloaded (css, js, vbs, etc).
All css is executed in scanned order.
All foreground and background images are added to the download queue.
All javascript is executed in scanned order.
The body onload event will trigger once the foreground and background images are cleared from the download queue.
After the body onload event triggers (if set) all other onload events will trigger.
All other html events are made active."


[Edited on July 31, 2007 at 10:34 PM. Reason : Maybe put something in css?]

7/31/2007 10:33:34 PM

LimpyNuts
All American
16859 Posts
user info
edit post

^^it works for me (Firefox 2.0.0.4 under debian linux). and it was tested by and worked for others using firefox.

In firefox, the OnError event fires immediately if the image path is invalid (OnLoad fires when the page is rendered). It wont work if you have gopher as a registered protocol, may not work in browsers other than firefox, etc. it's been noted that it doesn't always work, but it works for some people, which right now is better than none.

The easiest solution is probably to delete the /images/logo.gif file on the server so that the OnLoad event never fires for that element. I tried a number of things and the only thing that did not result in the post being submitted on my setup was an immediate redirect.



I just did a quick test and found:
Works for:
- Firefox 2.0.0.x
- IE 5.50.4807.2300
- Konqueror 3.5.6

Does not work for:
- IE 5.00.2612.xxxx (onload event triggered before page is rendered)

All tested in Ubuntu 7.04 (debian linux -- and yes you can run IE in linux)

[Edited on July 31, 2007 at 11:56 PM. Reason : ]

7/31/2007 11:42:13 PM

marko
Tom Joad
72828 Posts
user info
edit post

i would try to delete the main logo, but the code rewrites the name to always be logo.gif

so even if i title it "blank.gif" on my computer, the form i upload the logo in renames it

and of course, an admin would need to rewrite the code

8/1/2007 10:30:56 AM

marko
Tom Joad
72828 Posts
user info
edit post

ok i just took the logo down completely

i wonder if that will help

8/1/2007 10:33:33 AM

sober46an3
All American
47925 Posts
user info
edit post

i think the makes a great logo!

8/1/2007 10:46:51 AM

terpball
All American
22489 Posts
user info
edit post

would be a cool logo

8/1/2007 10:47:06 AM

sober46an3
All American
47925 Posts
user info
edit post

id prefer this:



make it happen marko.

8/1/2007 10:48:47 AM

Tyr
Suspended
103 Posts
user info
edit post



I can never remember how to resize images...

[Edited on August 1, 2007 at 10:55 AM. Reason : asdf]

8/1/2007 10:53:54 AM

sober46an3
All American
47925 Posts
user info
edit post

i love you.

8/1/2007 10:54:12 AM

pilgrimshoes
Suspended
63151 Posts
user info
edit post

Someone set us up the virus

8/1/2007 11:11:15 AM

LimpyNuts
All American
16859 Posts
user info
edit post

Quote :
"ok i just took the logo down completely

i wonder if that will help"

It looks like it helps with IE.

8/1/2007 11:33:07 AM

Tyr
Suspended
103 Posts
user info
edit post

yea, I think it's pretty much over now

but how does your code work anyways, where is there an invalid image path?

8/1/2007 11:35:43 AM

LimpyNuts
All American
16859 Posts
user info
edit post

the virus uses the onload event for an image (which happens to be the TWW logo). if the image is not there, the onload event doesn't happen.

my code uses the onerror event of an image that does not exist "gopher:/", which triggers either at the same time as or before the onload event, depending on your browser and how fast the page loads. it only prevents the thread creation some of the time, but that is better than nothing.

8/1/2007 1:20:21 PM

se7entythree
YOSHIYOSHI
17377 Posts
user info
edit post

so is the reason that i haven't seen any of this and don't quite understand what you're talking about because i've been using adblock and blocked all of tww logos and ads and whatnot at the top of the page?

8/1/2007 2:22:30 PM

joe_schmoe
All American
18758 Posts
user info
edit post

no. not really.

8/1/2007 2:27:03 PM

myerlyn
All American
1319 Posts
user info
edit post

So if i understand everything correctly....somebody made a virus, most likely sorositute(sp) that only affected premium members, the virus would create topics new infected topics if a premi clicked on an infected topic (?) to stop this people disabled java but some people need java so this was not a final solution

the injected threads can not be deleted because only crazyj and the other owner are the only people that can moderate FF, leaving the other mods helpless to stop the attacking virus

then limpy created a "magic" code that stopped the virus from spreading, by pushing people out of the infected topics before the virus could create a new infected topic, around about the same time marko realized that the virus was attached to tww image and disabled it preventing the virus from spreading because the virus did not have time to load.

To much drama in feed back forum

1) fix problem
2) write fictional account of what happened
3) get agent
4) Profit $$$$

8/1/2007 3:37:16 PM

qntmfred
retired
40726 Posts
user info
edit post

that's a pretty big if

8/1/2007 3:44:32 PM

TreeTwista10
minisoldr
148439 Posts
user info
edit post

wolf

8/1/2007 3:45:15 PM

Aficionado
Suspended
22518 Posts
user info
edit post

Quote :
"around about the same time marko realized that the virus was attached to tww image and disabled it preventing the virus from spreading because the virus did not have time to load."


even empty the image and the link are still there

check the source code

8/1/2007 4:16:15 PM

TreeTwista10
minisoldr
148439 Posts
user info
edit post

its back

8/2/2007 10:15:12 AM

marko
Tom Joad
72828 Posts
user info
edit post

i just took the logo back down because the problem has not been fixed as i was led to believe

8/2/2007 10:28:34 AM

TreeTwista10
minisoldr
148439 Posts
user info
edit post

you like my temporary fill in logo, at least on this page

not aligned now cause of a tall chatterbox tho

[Edited on August 2, 2007 at 10:32 AM. Reason : .]

8/2/2007 10:31:46 AM

qntmfred
retired
40726 Posts
user info
edit post

lol wtg

8/2/2007 10:37:44 AM

Tyr
Suspended
103 Posts
user info
edit post

8/2/2007 10:37:56 AM

marko
Tom Joad
72828 Posts
user info
edit post

fyi: anyone who is wondering why some old thread are being moved to the trash bin

we are currently in the process of cleaning out the old threads in forums previously unaccessible

8/18/2007 7:01:45 PM

qntmfred
retired
40726 Posts
user info
edit post

don't forget about

487237
487241
487632
487633
487641
487645
487650
487652
487655
487657
487678
487691
487696
487705
487712
487743
487744
487750
487758
487763
487774
487776
487782
487814
487817
487827
487837
487840
487874
487895
487912
487939
487959
488013
488019
488020
488048
488051
488053
488112
488136
488146
488170
488198
488458
488460
488494
489056
489124

8/18/2007 7:33:31 PM

NCSUStinger
Duh, Winning
62450 Posts
user info
edit post

does this mean we get the logo back now?

8/18/2007 11:01:01 PM

 Message Boards » Feedback Forum » Someone wrote a TWW virus Page 1 [2] 3, Prev Next  
go to top | |
Admin Options : move topic | lock topic

© 2024 by The Wolf Web - All Rights Reserved.
The material located at this site is not endorsed, sponsored or provided by or on behalf of North Carolina State University.
Powered by CrazyWeb v2.39 - our disclaimer.