I'm somewhat confused by these recent comments to the bug tracker (tickets 3514520, 3514538, 3514563). There appears to be a spambot out there that just enters non-descript compliments into web forms.
Who would write such a thing? I thought spambots were created for phishing scams, selling fake products, or boosting link counts to unscrupulous websites (which are motivations I can understand even if I disagree with them). This one appears to have no purpose at all except to provide encouragement to bloggers. It's just weird.
Chuck
On Tue, Apr 3, 2012 at 22:53, Charles Henry czhenry@gmail.com wrote:
I'm somewhat confused by these recent comments to the bug tracker (tickets 3514520, 3514538, 3514563). There appears to be a spambot out there that just enters non-descript compliments into web forms.
Who would write such a thing? I thought spambots were created for phishing scams, selling fake products, or boosting link counts to unscrupulous websites (which are motivations I can understand even if I disagree with them). This one appears to have no purpose at all except to provide encouragement to bloggers. It's just weird.
Chuck
Maybe it tries to inject javascript for xss (http://en.wikipedia.org/wiki/Cross-site_scripting) or php or mysql to be eventually executed on the server? Or we're just being malicious ;)
András
On 4/3/12, András Murányi muranyia@gmail.com wrote:
Maybe it tries to inject javascript for xss (http://en.wikipedia.org/wiki/Cross-site_scripting) or php or mysql to be eventually executed on the server? Or we're just being malicious ;)
András
LOL--I get it now. Probably, sourceforge has some intelligence (more than me) to strip out script tags. When I view the page source, there's no additional text. So, that seems likely--as long as the motivation is to hack websites. Thanks for the explanation.
I'm sad it's not the first assumption. I would be really interested in a robot crawling around complimenting people. If only I knew how to make one...
2012/4/3 Charles Henry czhenry@gmail.com:
On 4/3/12, András Murányi muranyia@gmail.com wrote:
Maybe it tries to inject javascript for xss (http://en.wikipedia.org/wiki/Cross-site_scripting) or php or mysql to be eventually executed on the server? Or we're just being malicious ;)
András
LOL--I get it now. Probably, sourceforge has some intelligence (more than me) to strip out script tags. When I view the page source, there's no additional text. So, that seems likely--as long as the motivation is to hack websites. Thanks for the explanation.
Pd-dev mailing list Pd-dev@iem.at http://lists.puredata.info/listinfo/pd-dev
I think those are usually SEO (Search Engine Optimization) bots that go around posting innocuous comments with a link to the thing they want to promote. In other words, spam.
I still think we should turn on the requirement to log into sourceforge before posting to the trackers. It'll prevent that kind of spam.
.hc
On Apr 4, 2012, at 11:44 PM, Jim Hickcox wrote:
I'm sad it's not the first assumption. I would be really interested in a robot crawling around complimenting people. If only I knew how to make one...
2012/4/3 Charles Henry czhenry@gmail.com:
On 4/3/12, András Murányi muranyia@gmail.com wrote:
Maybe it tries to inject javascript for xss (http://en.wikipedia.org/wiki/Cross-site_scripting) or php or mysql to be eventually executed on the server? Or we're just being malicious ;)
András
LOL--I get it now. Probably, sourceforge has some intelligence (more than me) to strip out script tags. When I view the page source, there's no additional text. So, that seems likely--as long as the motivation is to hack websites. Thanks for the explanation.
Pd-dev mailing list Pd-dev@iem.at http://lists.puredata.info/listinfo/pd-dev
Pd-dev mailing list Pd-dev@iem.at http://lists.puredata.info/listinfo/pd-dev
----------------------------------------------------------------------------
I hate it when they say, "He gave his life for his country." Nobody gives their life for anything. We steal the lives of these kids. -Admiral Gene LeRocque
-
András Murányi -
Charles Henry -
Hans-Christoph Steiner -
Jim Hickcox