Very cool. Reminds me of a few years back when I was writing apps for facebook..along with there fan pages. They had there own markup language 'fbml' and 'fbjs'. The app was executed in a sandbox inside an iframe, which you could add as a tab on a fan page as well.
A few times I broke thru there sandbox, allowing me to run any xss on page load, even on the fan page...it grabbed there token and added friends, invited a random number or friends to a fan page, likes fan pages, then post a status update...all random, nd it would base it on how many friends the user had. Anyway, a big problem was other developers stealing my code thnx to it being JS...So I ended up using every bug in JS like this, to confuse. I made a function that would pull element names/type/src etc, then used that as a alphanumeric definition. So my source had no spelt out names...on top of using JS hacks..then finally obfuscating.
I rmbr the last time I did this and released it into the wild..it was patched up by FB in the morning after it sent to a security researcher who posted on his popular site for his audience to reverse engineer, which they did in a few hours...everything but the few lines that was passed to fb's sandbox that returned the broken code which enabled me to run the xss....
Gooooood times...javascript is fun#!
I was just chatting with some girl about this..Back in my AOL days you would get hit with the 'YOU=' or 'U=' as soon as you entered a chat. Mostly because we had thousands of aol logins and was always on a different account.
I use to service pools back in high school on the north shore of long island. And I remember doing Simons house, unbelievable property. The house keepers house was 5x bigger then mine..and the pool was massive, right on the edge of a cliff overlooking the long island sound. Sry if its offtopic but this read made me think of it!
Wow that sounds like a big housekeeper's house. Do you remember anything else interesting about the house? Maybe this will be the detail we need to finally crack what's behind all that alpha.
My bet it's some Frankenstein advanced brain machine interface device using the combined consciousness of 10,000 cryogenically preserved heads in a secret cliffside bunker. /s
Myspace had alot of issues when it came to security. At one point I was discovering multiple exploits every week that gave me access to any account I wanted. Most were patched up in a few days, using some temp workaround that would end up creating a new hole to explore lol, it was the wild west for me. Now I never used it to pull sensitive data or any type of illegal activities such as fraud etc..BUT I may have had quite a few sites that suddenly had millions of active users browsing them. ;] Im sure if I hopped on some of my old machines, I could post some interesting code from those days...
+1 ..I've been buying coffee recently from 7-11 in the morning, and I noticed there credit card swiper UI. When I use my debit card, ive always used 'credit' not debit, and im sure a huge % of people do the same, and here are the steps...
Swipe card
Is this a debit card? Y/N
I Click No
Do you want cash back? Y/N
I Click No
Then you must click cancel to run to bring up credit option ( but no instructions to do so)
Then click credit, then click okay to the amount.
Then its finally completes the purchase.. now each step takes a few seconds after each click, and you must use there stylus because just usingyour fingers wont work!
I know this is a random comment, but UI related and ivd just noticed this recently, every 711 here on long island has the same machines! It doesnt seem like alot of steps but i bet the lines would move alot faster if they tweaked the UI a tiny bit!
I would add investing in precious metals to that list. Especially silver and gold right now. Its been extremely undervalued, and steadily moving sideways. When this stock market tanks even more then it has the last few weeks, we are going to see metals sky rocket like it has in the past. Gold and silver are an indispensable long-term inflation hedge. Look at jpmorgan, they were shorting silver for how long, now they are going long buying almost 2million ozs a day, i think they are up to over 750million ozs. All the central banks are buying up as much as they can get there hands on, so id say its a safe move to use a % of your savings and buy physical silver and gold. Im staying away from the paper precious metals investments, because if we do have a financial melt down, at least i know ill have some of my savings in my physical possession. ;]
No, that's very poor advice. Precious metals are comparable to individual stocks -- by making a purchase, you are not "investing"; you are speculating. There is no guarantee of long-term gains.
Precious metals often take a dive in a market crash because people need to sell assets to cover margin calls and other debts that come due.
Here is what Warren Buffet had to say about gold...
“You could take all the gold that’s ever been mined, and it would fill a cube 68 feet in each direction. For what that’s worth at current gold prices, you could buy all—not some—of the farmland in the U.S. Plus, you could buy 16 Exxon Mobils, plus have $1 trillion of walking-around money. Or you could have a big cube of metal. Which would you take? Which is going to produce more value?”
Cool article. Ive done alot of specialty flooring jobs in the city and have been in some amazing buildings. They forgot to mention the amount of service elevators that are required to have a operator. My favorite was 20 broadway, rockafella standard oil building. There service elevator was 100+ years old, you could maybe fit 4 people in it. You have to take 1 elevator down then walk accross a super creepy basement with random staircases that lead to arch doorways of brick, broken concrete.Really cool stuff.
The operator was a real bundle of joy too. If you juiced him, he would get you and your tools up before anybody else, ive seen this quite a few times. The floor i was working on too was intresting, it was a old lawyers office, there was an illumaniti triangle designed in the orginal concrete from 1928, and they made a big deal about not touching it the entire project (it was cracked, had holes) I ended up repairing it on one of the last days.
I intended to quote this passage, but had phone problems:
"And then, after the service entrances, you have to ride in the service elevators. These are some of the scariest places in the world, if you ask me. New York is full of old ones that are operated by cables. And the high rise types are like being inside wind tunnels--try riding in one with too much weight. We had to lift this 1000 pound marble slab into the elevator of the UN apartment building because it was too long to go straight in. It took about six of us to lift it. Then, while it was leaning against the elevator wall and we were underneath it, the car started to drop erratically because of the weight. We got stuck in there for almost an hour; the whole time was spent thinking we were going to die, telling stupid jokes about disaster movies and trying not to shit in our pants. This was done for this bachelor type who had nothing but Hawaiian shirts in his closet. Family money from aluminum, I think.
The service entrances and elevators make you realize that you are part of the lower class and I guess, in that, the architects have succeeded in some perverse way. I mean, you feel like a service person when you are in them--you know where you are and why you're there. It's very humiliating--as is being treated like shit by the owners and the doormen and everyone else--but it makes a certain amount of sense, architecturally. I just wish I could make every architect who designed a small elevator or a dangerous service entrance come on the truck with us for one day, so I could show them what idiots they are. I have a real distaste for architects now. Look at all the ugly buildings in New York City and remember: they are worse on the inside."
Duncan Trussell Family Hour,
Its All Happening - Zach Leary,
Radiolab,
Tangentially Speaking with Dr Christopher Ryan,
The Dr Drew Show,
The Joe Rogan Experience,
WTF Podcast,
Ari Shaffir's Skeptic Tank,
MAPS Podcast,
Today I got an email from a female friend of mine who passed away 4 years ago. Apparently they used her facebook info (email, display name) with the subject being 'Fwd for 'my facebook display name' followed by terrible spam .. Ohhhhh how I long for the days that we weren't hooked on social media.
