The Grey Labyrinth is a collection of puzzles, riddles, mind games, paradoxes and other intellectually challenging diversions. Related topics: puzzle games, logic puzzles, lateral thinking puzzles, philosophy, mind benders, brain teasers, word problems, conundrums, 3d puzzles, spatial reasoning, intelligence tests, mathematical diversions, paradoxes, physics problems, reasoning, math, science.

Lepton · 1:41+ Arse Scratcher

I've banned the username Sabaku_no_Gaara for 'inappropriate language'. Here's the thread; see the bottom of page 1 and the top of page 2: thread.
Discussion?

Neo · Daedalian Member

Eh. Another troll bites the dust. I like having an empty ban list, but he was only going to get worse if left unchecked.
_________________
_{Ad Astra}

Dented Ford · Hoopy Frood

I have only admiration at your restraint in not doing it sooner.

Lepton · 1:41+ Arse Scratcher

In a fit of curiosity, I found an exploit that would let Sabaku (or someone else) perform administrative functions by embedding a script into an offsite-referenced avatar and getting an admin user to view the avatar. It should also be possible to do it with [img] tags.

Now I feel justified in my habit of not logging in. : )

(Antrax, the upgrade fixes this; if you've got time... here is some info)

Antrax · ESL Student

I personally am immune to such attacks, due to a combination of relevant knowledge and choice of browser/plugins. That being said, I can't say I would have banned anyone for inappropriate language, lest I be forced to ban myself and many other site regulars.
_________________
After years of disappointment with get rich quick schemes, I know I'm gonna get rich with this scheme. And quick!

Neo · Daedalian Member

Antrax · ESL Student

Well, without having read the article I'm guessing the attack is stealing a cookie and subsequently using it to hijacking a session. That wouldn't be too bad as re-authentication is required to log on to the admin panel, even if you're already logged on. Plus, if you don't use the "log me in automatically", you are again immune. Of course, Firefox offers a lot of protection, and the fact I only run javascript I explicitly allow and that I reject all cookies unless otherwise specificied both assist in my immunity to these simple attacks.
So, you could do any of those, or you could prod me to update our phpBB version more often Felicitous

_________________
After years of disappointment with get rich quick schemes, I know I'm gonna get rich with this scheme. And quick!

Samadhi · +1

Yeah. Yeah. So how about that update?
_________________
And he lived happily ever after. Except for the dieing at the end and the heartbreak in between.

Antrax · ESL Student

Having read Lepton's URL, I see that this attack is old news, and I believe we've patched against it a while back.
_________________
After years of disappointment with get rich quick schemes, I know I'm gonna get rich with this scheme. And quick!