Re: [PD-dev] [OT] spambots that deliver compliments?

2012-04-05 Thread Hans-Christoph Steiner

I think those are usually SEO (Search Engine Optimization) bots that go around 
posting innocuous comments with a link to the thing they want to promote.  In 
other words, spam.

I still think we should turn on the requirement to log into sourceforge before 
posting to the trackers.  It'll prevent that kind of spam.

.hc

On Apr 4, 2012, at 11:44 PM, Jim Hickcox wrote:

> I'm sad it's not the first assumption.
> I would be really interested in a robot crawling around complimenting people.
> If only I knew how to make one...
> 
> 2012/4/3 Charles Henry :
>> On 4/3/12, András Murányi  wrote:
>>> Maybe it tries to inject javascript for xss
>>> (http://en.wikipedia.org/wiki/Cross-site_scripting) or php or mysql to
>>> be eventually executed on the server? Or we're just being malicious ;)
>>> 
>>> András
>> 
>> LOL--I get it now.  Probably, sourceforge has some intelligence (more
>> than me) to strip out script tags.  When I view the page source,
>> there's no additional text.  So, that seems likely--as long as the
>> motivation is to hack websites.
>> Thanks for the explanation.
>> 
>> ___
>> Pd-dev mailing list
>> Pd-dev@iem.at
>> http://lists.puredata.info/listinfo/pd-dev
> 
> ___
> Pd-dev mailing list
> Pd-dev@iem.at
> http://lists.puredata.info/listinfo/pd-dev




I hate it when they say, "He gave his life for his country."  Nobody gives 
their life for anything.  We steal the lives of these kids.  -Admiral Gene 
LeRocque


___
Pd-dev mailing list
Pd-dev@iem.at
http://lists.puredata.info/listinfo/pd-dev


Re: [PD-dev] [OT] spambots that deliver compliments?

2012-04-04 Thread Jim Hickcox
I'm sad it's not the first assumption.
I would be really interested in a robot crawling around complimenting people.
If only I knew how to make one...

2012/4/3 Charles Henry :
> On 4/3/12, András Murányi  wrote:
>> Maybe it tries to inject javascript for xss
>> (http://en.wikipedia.org/wiki/Cross-site_scripting) or php or mysql to
>> be eventually executed on the server? Or we're just being malicious ;)
>>
>> András
>
> LOL--I get it now.  Probably, sourceforge has some intelligence (more
> than me) to strip out script tags.  When I view the page source,
> there's no additional text.  So, that seems likely--as long as the
> motivation is to hack websites.
> Thanks for the explanation.
>
> ___
> Pd-dev mailing list
> Pd-dev@iem.at
> http://lists.puredata.info/listinfo/pd-dev

___
Pd-dev mailing list
Pd-dev@iem.at
http://lists.puredata.info/listinfo/pd-dev


Re: [PD-dev] [OT] spambots that deliver compliments?

2012-04-03 Thread Charles Henry
On 4/3/12, András Murányi  wrote:
> Maybe it tries to inject javascript for xss
> (http://en.wikipedia.org/wiki/Cross-site_scripting) or php or mysql to
> be eventually executed on the server? Or we're just being malicious ;)
>
> András

LOL--I get it now.  Probably, sourceforge has some intelligence (more
than me) to strip out script tags.  When I view the page source,
there's no additional text.  So, that seems likely--as long as the
motivation is to hack websites.
Thanks for the explanation.

___
Pd-dev mailing list
Pd-dev@iem.at
http://lists.puredata.info/listinfo/pd-dev


Re: [PD-dev] [OT] spambots that deliver compliments?

2012-04-03 Thread András Murányi
On Tue, Apr 3, 2012 at 22:53, Charles Henry  wrote:
> I'm somewhat confused by these recent comments to the bug tracker
> (tickets 3514520, 3514538, 3514563).  There appears to be a spambot
> out there that just enters non-descript compliments into web forms.
>
> Who would write such a thing?  I thought spambots were created for
> phishing scams, selling fake products, or boosting link counts to
> unscrupulous websites (which are motivations I can understand even if
> I disagree with them).  This one appears to have no purpose at all
> except to provide encouragement to bloggers.  It's just weird.
>
> Chuck
>
>

Maybe it tries to inject javascript for xss
(http://en.wikipedia.org/wiki/Cross-site_scripting) or php or mysql to
be eventually executed on the server? Or we're just being malicious ;)

András

___
Pd-dev mailing list
Pd-dev@iem.at
http://lists.puredata.info/listinfo/pd-dev