tranceaddict hackable ? FAO TA Admin.

Become a part of the TranceAddict community!

Frequently Asked Questions - Please read this if you haven't

TranceAddict Forums > Main Forums > Chill Out Room > tranceaddict hackable ? FAO TA Admin.

Last Thread Next Thread

Author

Thread

Rostros
Carbon Sasquatch

Registered: Dec 2001
Location: United Kingdom

tranceaddict hackable ? FAO TA Admin.

I was not sure where to post this information on the forums but, I have been playing around with the site to look for its week points, don't worry i ain't done anything but I have seen a big hole in your security on the Forums. take a look at this

Edited by Blik

___________________

" You bet your ass we're all alike... we've been spoon-fed baby food at school when we hungered for steak... the bits of meat that you did let slip
through were pre-chewed and tasteless. We've been dominated by sadists, or ignored by the apathetic. The few that had something to teach found us will-
ing pupils, but those few are like drops of water in the desert."

Last edited by Blik on Mar-14-2002 at 16:11

Mar-14-2002 14:31 United Kingdom

Click here to Send Rostros a Private Message

AndiH
Currently not available.

Registered: Jan 2001
Location: Regensburg, Germany | GTA #15

wow...you seem to be a |33t hacker

vbulletin cannot be hacked the way you described it...(feel free to hack my account...)

Mar-14-2002 15:18

Click here to Send AndiH a Private Message

Blik
The Almighty Blik

Registered: Jan 2001
Location: Rosmalen, Holland

PM Swamper and don't post it in public on the board dude, I thought you would be smarter than that!!

closed

___________________
Alsof Het G*dverdomme Himmel Niks Kost!!!

Mar-14-2002 16:11

Click here to Send Blik a Private Message

Swamper
Webmonstah

Registered: Jan 2000
Location: Toronto, Canada

haha

Well Blik told me what you said.

Here's some insight:

The s=xxxxxxxxxxxxxxxxxx session ID that is present in the URL links your IP, browser version/type, and time into an algorithm and pumps out that string - now in order for you to see or access something someone else is seeing you have to have that session ID and match all of the other variables.

You're not a hacker m8, don't waste your time on here, I do network security in my spare time...

besides, even if you did find a real exploit there are ways to report it - www.vbulletin.com for one, or feedback/PM to me

What you did is sort of like putting a sign on somebody's lawn saying that they left their keys in their front door but you're not sure if it's the right key but you just wanted to let them know. (i.e. putting a message in their mailbox would've sufficed)