Autoplaying flash movies

By DogMeid on June 7, 2009 2:09:49 PM from

Demigod Forums

DogMeid

Join Date 06/2009

you can use html code to embed a video.

then you can add a &autoplay=1 parameter to the URI in the embed code to get that video to play automatically.

you can even hide your misdeed by reducing the video size to zero, although that doesn't protect you from code inspection.

and last but not least, you can embed all kinds of shit using code embedding ... google analytics even, just to find out who is gonna read your bloody post.

So the great question is how to stop this exploit without killing the cool embed fan video feature. Easy enough. Disable html embedding and create tags for allowed embeds.

So there, I spilled the beans. You can thank me for pointing you to a glaringly obvious security flaw. And now give me back my posting rights!

I'd quote the code but i think the code quoting feature doesn't escape the html code correcty, but here's anyway:

Code: html
<object width="480" height="295">
  <param name="movie" value="http://www.youtube.com/v/43p7JPqZkPg&hl=de&fs=1&hd=1&autoplay=1"></param><param name="allowFullScreen" value="true"></param>
  <param name="allowscriptaccess" value="always"></param>
  <embed src="http://www.youtube.com/v/43p7JPqZkPg&hl=de&fs=1&hd=1&autoplay=1" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="480" height="295"></embed>
</object>

wow, quoting works

Uh. You aren't funny.

Successfully updated karma reason!

I would hope that people that imbed shit like this get banned immediately. Some people are at work, some have babies sleeping, etc.

If there was ever a no tolerance rule, this should classify as one.

Successfully updated karma reason!

He already has been- confusing the pants off of little nubs all over the forums.

Successfully updated karma reason!

they'll get over it.

And if they indeed would have banned me immediatly just to cuddle up to self-righteous overlords like night train (check his friendly posts) then this would be a less nice place to hang out.

And I really don't get why babies would object to homer simpson, nor do I think that you should browse private stuff while on work. Different morals, I suppose.

And now Aroddo wants his posting rights back.

I didn't even get a message or something ... just - duh - can't post or edit. If I were stupid I'd be wondering what was going on but since I'm not and I have a good guess why my posting rights were canceled even without a fuck-you-message, I'd at least like to know who did it so I can appeal to him/her.

Half-banning me without a warning is an asshole move.

Successfully updated karma reason!

It has nothing to do with allowing embedding in itself. It's a youtube option. And if you use it intentionally to annoy people, you can expect that it won't be tolerated.

That aside, making a new account to circumvent a posting restriction is a surefire way to see that you really do get banned (and it sticks).

Successfully updated karma reason!

I don't want to be banned. I want this resolved.

Do you see me using the new account to make the lifes miserable for the rest of the board ?

No, you don't. You see me owing up to what I did and waiting for the customary don't-do-this-again scolding and be done with it.

I'm not one of the bag of assholes that don't have better things to do than insult others because they use the wrong Demigod build or bitch around in capitals because of certain connection issues or perceived unbalancing issues.

I'm actually contributing to the community, be it scripting for the demigod wiki, writing articles there, or even making fan videos of the game using it's pretty ingame footage. See here for examples.

So I kinda expected you to cut me some slack instead of being threatened with getting banned for real.

Of course I can hardly assume that anyone bothered to look that up for a trivial matter like this, so I don't think it's fair to accuse anyone of negligence.

Anyway, that's how I feel about it and I want my posting rights back.

Successfully updated karma reason!

hilarious.

And now that officials are officially involved I'd like to know what has to happen so that I get my posting rights back.

Successfully updated karma reason!

standard procedure is to pm/email the mod and discuss it privately

open forum discussions on one person's posting limitations or banning serves no justifiable purpose since the standard procedure works

the only reason I see for people openly posting/complaining about posting restriction or bannings is to garner open forum support by their buddies to try and overwhelm in order to make a mod back down whcih I find unacceptable since it shows disregard for any rules/policies/forum intent/and or what ever else you want to lump in, which is usually along the same reasons that caused the problem to begin with.

plus, open forum complainings of this type generally decay into flame wars at which point the post gets locked, a new opens up and it starts all over again.

With all that effort causing no effect on the original restrictions

If you don't know who the mod was, pm/email another to see if they can find out for you

If you are uncomfortable with pm'ing/emailing that mod in particular for whatever reason, ask another to mediate

tada

Successfully updated karma reason!

standard procedure should be to pm ME and give me a nice little trashing instead of banning me without any notice whatsoever.

and as you can see the thread is overflowing with my supporters, so pressure is at a boiling point.

I sent a pm to about every staff member I know of and the only one that answered was kryo who told me that he didn't do it.

And so I wait.

Successfully updated karma reason!

All I can say is... think before you post something stupid. Like those embedded links in a post.

Successfully updated karma reason!

why do you say you were banned?

can you not log in?

when I pulll up your profile "Aroddo" it doesn't show as banned or exiled

and taking into account Kryo's:

Quoting kryo,

reply 5

It has nothing to do with allowing embedding in itself. It's a youtube option. And if you use it intentionally to annoy people, you can expect that it won't be tolerated.

That aside, making a new account to circumvent a posting restriction is a surefire way to see that you really do get banned (and it sticks).

you aren't banned, you posting priviledges have been temporarily suspended. there's a difference.

waiting is good and it's still the weekend

Successfully updated karma reason!

Why do people complain? What is it they want or hope for when they complain?

People who complain are generally people who have not done the emotional and spiritual work of developing a loving, compassionate inner adult self. They are operating as a wounded child in need of love, attention and compassion. Because they have not learned to give themselves the attention and compassion they need, they seek to get these needs met by others.

Complaining is a way they have learned to attempt to get this. They use complaining as a form of control, hoping to guilt others into giving them the attention, caring and compassion they seek.

Complaining is a “pull” on other people. Energetically, complainers are pulling on others for caring and understanding because they have emotionally abandoned themselves.

They are like demanding little children. The problem is that most people dislike being pulled on and demanded of. Most people don’t want emotional responsibility for another person and will withdraw in the face of another’s complaints.

Successfully updated karma reason!

oooooooommmmmmmmmm

Successfully updated karma reason!

I'm so glad you are enjoying this. You know, if I wasn't the butt of your comments I'd probably say you have a point.

But since my inner child is suffering from wounded emotions I possibly can't. Now I can only wait to have my privileges restored despite your attemps to goad me into ban-worthy behaviour.

Look, I'm really sorry If you got scared by homer simpson talking to you, ok? It was a harmless prank and I really couldn't anticipate that your baby doesn't appreciate Homer - or your boss at work.

Successfully updated karma reason!

I feel for you. And I want to believe you even though you continue to be kind of a smart ass.

One thing to consider. You aren't coming off as sounding very sincere. If you wanted to resolve this in a mature manner, you would have PMd a mod and not made this post... which comes off as you gloating about how your leet haxing skills > the fourm.

Successfully updated karma reason!

Why do people complain? What is it they want or hope for when they complain?

Sorry NT, I disagree. people complain for many different reasons, some complain just because they are pissed off about something and need to vent. venting is a healthy process which allows the mind to vocalize the perception. and no offense, but you're no Dr. Phil.

DogMeid on the other hand appears to be an arrogant little twit who got caught with his hand in the cookie jar and is back peddling. I'm no Dr. Phil either however this seems more like a permission/forgiveness issue rather than a "woe is me" kind of thing.

If you wanted to resolve this in a mature manner, you would have PMd a mod and not made this post

right, works every time. It's the first thing I would think of when I'm pissed. sort of like writing your congressman to complain about US policies, good in theory but...

and yet another reason to hate flash!!!

Successfully updated karma reason!

Whee, I can post again, even though I'm not supposed to.

Found another security leak, guys.

Successfully updated karma reason!

So back to the topic, which oddly enough isn't about flaming the OP! (who'd of thought, huh?)

Has this been disabled yet? I do not feel that moderating people when you catch them ( emphasis on when...) doing this is at all an adequate fix. I shouldn't have to wait for someone to notify a mod or for a mod to notice something like this, I don't think anyone wants to hear random sounds whilst browsing a thread, and there are some pretty obnoxious sounds on some youtube videos, a lot of which are definately not worksafe.

Successfully updated karma reason!

if sounds are the only thing you worry about, then you're mightily easygoing.

Let's just say that if anyone choose to, they could bring your pc to a standstill, attack the dg server or even get you to jail, depending on your countries laws.

In germany some asshole politicians want to implement a regulation that immediatly starts preliminary proceedings against you just for opening certain websites in your browser (that's supposed to protect someone from child pornography, I'm told).

Imagine the fun of getting jailed as kiddy fucker thanks to Stardock, the possible future main hub for child pornography. And just because one anonymous user might choose to put in some htlm code that calls those unwanted sites.

I can also imagine that americans visiting certain homeland security monitored websites might find themselves on a certain list.

but it's pretty pointless to notify anyone here. Standard procedure at SD seems to be banning the users abusing that feature.

Kinda like guarding the rubble after the planes hit the twin towers.

Successfully updated karma reason!

Flashblock FTW.

Successfully updated karma reason!

Quoting Kitkun,

reply 21

Flashblock FTW.

complete bullshit.

html embedding is the problem.

Successfully updated karma reason!

html embedding is the problem.

no it's not

the problem is

the users abusing that feature.

Successfully updated karma reason!

Quoting Bichur,

reply 23

html embedding is the problem.

no it's not

the problem is

the users abusing that feature.

oh my god.

...

this must be about the most stupid thing i've ever read here.

Successfully updated karma reason!

How many more people does this fucktard have to insult before banning him permanently?

Anyone can post a picture of anything at any time and then the viewer has it in their temp files so your not impressing anyone. You are only showing how much of an ass you can really be.

Oh and you think you can get around a ban by having different accounts, well they have seen shitheads like you before and know how to deal with that.

Buh Bye!

Successfully updated karma reason!

The Forums Are Now Closed!

The content will remain as a historical reference, thank you.

Autoplaying flash movies

DogMeid