I was contemplating infracting one of the "ebaums" spammers, and came across this:

http://i6.photobucket.com/albums/y243/ArgonPlasma2000/huh.jpg?t=1183646393

PS: I refreshed again and it seems he is already tempbanned. Still, is the stalker ability accurate?

Quite strange...Anyone with a bit of technical reasoning behind this?

It's the name of the thread the person was making right? And not that they are in here. Someone that saw the leaked image perhaps? Maybe just a coincidence?

It can't show the name of the thread they're creating because they've not created it yet. As of then the thread name is just an entry in an unsubmitted form. I've seen it before and it shows the name of the forum they're creating a thread in.

Maybe one of us is the spammer?

*glares at everybody*

Maybe one of us is the spammer?

*glares at everybody*

I blame the Jews

But an account needs to be under one of the special usergroups in order to see/access this forum...

I sense a disturbance in the Force.

Sorry, I farted.

This is just a hypothesis, but perhaps if one were to craft the URL that would start a new thread in this forum and send it, the status indicator would give that as the last activity even if the person didn't successfully authenticate. Someone with a non-privileged account can test this easily...


Entheogenic

Possible, but what are the odds that you'll visit the profile of a spammer as they try that?

If it happens once in a million, the single time it happened will seem like a minor miracle.

vBulletin has had a number of XSS vulnerabilities even in the 3.x.x releases that could be used to hijack a login session and escalate privileges when implemented properly. This may turn out to be nothing and current versions are relatively stable with regard to exploit impact and scope, but keep in mind the possibility.

Creepy.


I allways wondered, if a regular user looks up latest posts by a moderator, will the results also show posts made in the Mods and Admins forum?

Before, when I was stalking some of you people, if you clicked on the user profile it would often show:

Viewing Thread: ________

And that's it. So I don't think it shows the title, yet it's obvious where they're actually viewing it at.

Before, when I was stalking some of you people...


I'm flattered. :)

Interesting question. Even if they couldn't access the content of a thread, the title alone could still give out a lot of information.

Interesting question. Even if they couldn't access the content of a thread, the title alone could still give out a lot of information.

We can always post in Navajo. :o

We can always post in Navajo. :o

"Yo I studied you in school, you're a hunter-gather."

"I suppose you could call us that. I prefer the term....alcoholic"


/Dave Chappelle

We can always post in Navajo. :o

Me, Angry. You, Argon.
Navajo - We no speak.

At least the passwords are no longer stored in plain text in a cookie... They're encrypted in md5 (I think) so as long as your password is secure (returns 0 results on google) you should be pretty safe. Of course, like you said, it doesn't stop someone who's hijacking sessions.

PS: I left something for you on IRC.

We can always post in Navajo. :o

I'd prefer Esperanto. I just like saying that word, es-per-rant-tooo!

I'd prefer Esperanto. I just like saying that word, es-per-rant-tooo!

The song is pretty nifty as well.