Bugs and Suggestions

7-Jan-16 8:44

That's the least of my fears.

cheers
Chris Maunder

Re: Youtube links

OriginalGriff9-Jan-16 2:04

OriginalGriff

9-Jan-16 2:04

I'm even more curious about what MM might post. Unsure | :~

And I don't think anyone wants to see it... Laugh | :laugh:

Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...

Suspicious ads

Maciej Los6-Jan-16 20:12

Maciej Los

6-Jan-16 20:12

Hello guys!

I've noticed that NoScript (Mozilla addon) had caught the following attempt of XSS injection:

[NoScript InjectionChecker] JavaScript Injection in ///ddm/adi/N233401.1392339DEVELOPERMEDIA.CO/B9333835.127053310;dc_ver=21.55;dc_eid=40004000;sz=728x90;dc_rdid=;dc_adk=2036841227;ord=gfpxxf;click=<a href="https://adclick.g.doubleclick.net/aclk?sa=L&ai=BpCZXOw2OVoCAGoewY8H4iPgCtrK3sQgAAAAQASAAOABYxqXCkdUCYOnkyYXYGoIBF2NhLXB1Yi00MjcxODYyMzI1NzY4ODI5sgETd3d3LmNvZGVwcm9qZWN0LmNvbboBCWdmcF9pbWFnZcgBCdoBPmh0dHA6Ly93d3cuY29kZXByb2plY3QuY29tL3NjcmlwdC9BbnN3ZXJzL0xpc3QuYXNweD90YWI9YWN0aXZlmALYNsACAuACAOoCHi82ODM5L2xxbS5jb2RlcHJvamVjdC5zaXRlL3Jvc_gC8NEekAOMBpgDpAOoAwHgBAGQBgGgBhbYBwA&num=0&cid=5Gh7YPOHEIt67SvUHOEMyUNp&sig=AOD64_19IblwV8PuZ0QfPdaUh3bdUkMgrQ&client=ca-pub-4271862325768829&adurl=;dc_rfl=1,http://www.codeproject.com/script/Answers/List.aspx?tab=active">https://adclick.g.doubleclick.net/aclk?sa=L&ai=BpCZXOw2OVoCAGoewY8H4iPgCtrK3sQgAAAAQASAAOABYxqXCkdUCYOnkyYXYGoIBF2NhLXB1Yi00MjcxODYyMzI1NzY4ODI5sgETd3d3LmNvZGVwcm9qZWN0LmNvbboBCWdmcF9pbWFnZcgBCdoBPmh0dHA6Ly93d3cuY29kZXByb2plY3QuY29tL3NjcmlwdC9BbnN3ZXJzL0xpc3QuYXNweD90YWI9YWN0aXZlmALYNsACAuACAOoCHi82ODM5L2xxbS5jb2RlcHJvamVjdC5zaXRlL3Jvc_gC8NEekAOMBpgDpAOoAwHgBAGQBgGgBhbYBwA&num=0&cid=5Gh7YPOHEIt67SvUHOEMyUNp&sig=AOD64_19IblwV8PuZ0QfPdaUh3bdUkMgrQ&client=ca-pub-4271862325768829&adurl=;dc_rfl=1,http://www.codeproject.com/script/Answers/List.aspx?tab=active</a>$0;sttr=46?
(function anonymous() {
tab=active$0;sttr=46 /* COMMENT_TERMINATOR */
DUMMY_EXPR
})

Can you check it?

Chris Maunder7-Jan-16 6:09

7-Jan-16 6:09

Looks like a 3rd party ad tag. I don't see any XSS in there but I'll certainly check it out.

cheers
Chris Maunder

Maciej Los7-Jan-16 19:51

Maciej Los

7-Jan-16 19:51

Thank you, Chris.

I checked it twice on my 2 laptops and 1 desktop before i posted this message. All machines all regularly checked for viruses, trojans, etc.

I do believe that you did something, because XSS warnings have gone today. Note that i did nothing.

Thank you.

Cheers,
Maciej

It get back.
As to my observation, XSS warnings are not displayed till ads on top are being unloaded.

modified 8-Jan-16 2:30am.

Jochen Arndt7-Jan-16 20:54

Jochen Arndt

7-Jan-16 20:54

I had it yesterday morning too and also now again.

If it helps:
The ads shown when this occurres are about Softlayer with clickable link [EDIT: inserted line breaks]

https://adclick.g.doubleclick.net/pcs/click
?xai=AKAOjstY4fXEO4wJ5mlIjfuN_skjkxLFyqpFzI8a_InDaAhZBLHih-wvMgVElXhFEwfTWrMyMe23Q8y2xD6aoQHO2DBIfjrXk45ihdcoL1STGA
&sig=Cg0ArKJSzKxeBTfNyIZf
&urlfix=1
&adurl=http://www.softlayer.com/info/break-boundaries-compute
%3Futm_source%3Ddeveloper_media
%26utm_medium%3Dbanner
%26utm_content%3DBreak_Boundaries_White%7CTargeting%7C728x90%7CJPG
%26utm_campaign%3DEU_-_EU_-_English_-_Region_-_Media_Buy_-_Developer_Media_-_SL_Branding

[UPDATE]
This happens only on the QA list page. I just had the same ad on a single QA page, in the lounge, and here while posting this message without a NoScript message.

[UPDATE 2]
The clickable link on other pages where the NoScript message does not occurr is different. Example:

https://adclick.g.doubleclick.net/pcs/click
?xai=AKAOjstRD0PGvv1wmRpZNqwnXp_s-duTli__SPigzXfolLWTn_eFoae153yDWcCXRc0cOWeP69d0f-Vw-CbiWXKKU2Yd65HFxpGtKlrZ0o3v1A
&sig=Cg0ArKJSzD_ewl2D4Df8
&urlfix=1
&adurl=https://adclick.g.doubleclick.net/aclk
%3Fsa%3DL
%26ai%3DBEE_uY2yPVufTO46fboTbr9AItrK3sQgAAAAQASAAOABYxqXCkdUCYJWCgIC4B4IBF2NhLXB1Yi00MjcxODYyMzI1NzY4ODI5sgETd3d3LmNvZGVwcm9qZWN0LmNvbboBCWdmcF9pbWFnZcgBCdoBZmh0dHA6Ly93d3cuY29kZXByb2plY3QuY29tL1F1ZXN0aW9ucy8xMDcwMTU4L0hvdy13b3VsZC1JLWdvLWFib3V0LW1ha2luZy1hLXJlYWxpc3RpYy1Tbm9va2VyLWdhP2Fybj00M5gC2DbAAgLgAgDqAh4vNjgzOS9scW0uY29kZXByb2plY3Quc2l0ZS9yb3P4AoHSHpADjAaYA6QDqAMB4AQBkAYBoAYW2AcA
%26num%3D0
%26cid%3D5GiltA
%26sig%3DAOD64_2DNkVrGZTJ7XNL4DEBMIwi1h0M6w
%26client%3Dca-pub-4271862325768829
%26adurl%3Dhttp://www.softlayer.com/info/break-boundaries-compute
%253Futm_source%253Ddeveloper_media
%2526utm_medium%253Dbanner
%2526utm_content%253DBreak_Boundaries_White%257CTargeting%257C728x90%257CJPG
%2526utm_campaign%253DEU_-_EU_-_English_-_Region_-_Media_Buy_-_Developer_Media_-_SL_Branding

modified 8-Jan-16 3:33am.

Maciej Los7-Jan-16 21:05

Maciej Los

7-Jan-16 21:05

Thank you, Jochen.

It's very interesting, because it happens only on QA forum.

I looked up into NoScript event log and this is what i see now:

Using //@ to indicate sourceURL pragmas is deprecated. Use //# instead rs=AGLTcCMOOHjdJMiEtHjnzYTwiQsW8U1Mwg:1245:0
about:blank : Unable to run script because scripts are blocked internally. <nieznane>
[NoScript InjectionChecker] JavaScript Injection in ///ddm/adi/N233401.1392339DEVELOPERMEDIA.CO/B9333835.127053310;dc_ver=21.55;sz=728x90;dc_rdid=;dc_adk=2036841227;ord=iiek3h;click=<a href="https://adclick.g.doubleclick.net/aclk?sa=L&ai=BXdBq-GiPVujKG6LuyAOlzIyQB7ayt7EIAAAAEAEgADgAWMalwpHVAmDp5MmF2BqCARdjYS1wdWItNDI3MTg2MjMyNTc2ODgyObIBE3d3dy5jb2RlcHJvamVjdC5jb226AQlnZnBfaW1hZ2XIAQnaAT5odHRwOi8vd3d3LmNvZGVwcm9qZWN0LmNvbS9zY3JpcHQvQW5zd2Vycy9MaXN0LmFzcHg_dGFiPWFjdGl2ZZgC2DbAAgLgAgDqAh4vNjgzOS9scW0uY29kZXByb2plY3Quc2l0ZS9yb3P4AoHSHpADjAaYA6QDqAMB4AQBkAYBoAYW2AcA&num=0&cid=5Ghu-BSkg09H5pKF61d2Ztj-&sig=AOD64_3w9DAxpaqaE3_R2CWF5xHjTWGHRQ&client=ca-pub-4271862325768829&adurl=;dc_rfl=1,http://www.codeproject.com/script/Answers/List.aspx?tab=active">https://adclick.g.doubleclick.net/aclk?sa=L&ai=BXdBq-GiPVujKG6LuyAOlzIyQB7ayt7EIAAAAEAEgADgAWMalwpHVAmDp5MmF2BqCARdjYS1wdWItNDI3MTg2MjMyNTc2ODgyObIBE3d3dy5jb2RlcHJvamVjdC5jb226AQlnZnBfaW1hZ2XIAQnaAT5odHRwOi8vd3d3LmNvZGVwcm9qZWN0LmNvbS9zY3JpcHQvQW5zd2Vycy9MaXN0LmFzcHg_dGFiPWFjdGl2ZZgC2DbAAgLgAgDqAh4vNjgzOS9scW0uY29kZXByb2plY3Quc2l0ZS9yb3P4AoHSHpADjAaYA6QDqAMB4AQBkAYBoAYW2AcA&num=0&cid=5Ghu-BSkg09H5pKF61d2Ztj-&sig=AOD64_3w9DAxpaqaE3_R2CWF5xHjTWGHRQ&client=ca-pub-4271862325768829&adurl=;dc_rfl=1,http://www.codeproject.com/script/Answers/List.aspx?tab=active</a>$0;sttr=31?
(function anonymous() {
tab=active$0;sttr=31 /* COMMENT_TERMINATOR */
DUMMY_EXPR
})

and

TypeError: this._recipeManager is null

and

getPreventDefault() method is obsolete. Use defaultPrevented instead.

And one more observation. Till Reply (to the comment) widget isn't used, XSS warning are not displayed.

I've noticed that the reputation points are not added in my profile

Jochen Arndt7-Jan-16 21:15

Jochen Arndt

7-Jan-16 21:15

I have just updated my post to indicate that it only happens in the QA list.

The message seems to be the same as yesterday (I still have the console with today's warning open).

I did not have the TypeError.

The getPreventDefault() message is not related to the problem. It is sourced by an Ajax JQuery script used by many sites.

Arthur V. Ratz6-Jan-16 14:17

Arthur V. Ratz

6-Jan-16 14:17

Hello. I've noticed that the reputation points are not added in my profile and I'd like to know the reason why ?!?! Smile | :)

Re: I've noticed that the reputation points are not added in my profile

Thanks78726-Jan-16 21:37

Thanks7872

6-Jan-16 21:37

It would be nice for Admins if you can explain in detail which reputation points you are talking about. On a side note, reputation point means nothing,really.

Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning

Re: I've noticed that the reputation points are not added in my profile

Arthur V. Ratz6-Jan-16 21:40

Arthur V. Ratz

6-Jan-16 21:40

I've actually stopped to receive reputation points for example approving articles, voting for the articles published by others, articles bookmarking, etc. Smile | :)

Thanks.

Re: I've noticed that the reputation points are not added in my profile

Richard MacCutchan7-Jan-16 3:00

Richard MacCutchan

7-Jan-16 3:00

Stop worrying about rep points; you can't exchange them for food.

Re: I've noticed that the reputation points are not added in my profile

Arthur V. Ratz7-Jan-16 3:03

Arthur V. Ratz

7-Jan-16 3:03

Thanks. Obviously that. Smile | :)

Subscription Error

Member 117910006-Jan-16 1:19

Member 11791000

6-Jan-16 1:19

Unsubscribe me. I have tried it 1000 times. I dont want a single mail of you guys there.

Re: Subscription Error

Richard MacCutchan6-Jan-16 2:20

Richard MacCutchan

6-Jan-16 2:20

I doubt very much that you have tried it 1000 times. It is a simple matter to close your account from your Settings page[^].

Is this type of article allowed?

Indivara5-Jan-16 16:31

Indivara

5-Jan-16 16:31

It could be considered a product review, but feels a bit spammy.

New Year, New Keyboard[^]

Re: Is this type of article allowed?

Chris Maunder6-Jan-16 5:04

6-Jan-16 5:04

I've moved it into the Hardware review section

cheers
Chris Maunder

Too many downvotes

Abhinav S5-Jan-16 7:13

Abhinav S

5-Jan-16 7:13

Error : could not find file C: while accessing database[^]
Syntax error (missing operator) in query expression[^]
How Do I Make A Custom Border[^]

If its the same person then I may need a little help!

Mobile Apps - Sound Meter | Color Analyzer | SMBC | Football Doodles

Chris Maunder5-Jan-16 7:57

5-Jan-16 7:57

What help would you like?

The voting system is designed to allow people (multiple) to provide feedback on your contributions. As far as I can tell, and with all due respect, the system is working.

cheers
Chris Maunder

Abhinav S5-Jan-16 15:39

Abhinav S

5-Jan-16 15:39

If the same person is down-voting, then action needs to be taken against the spammer.

Update: Please see Midi_Mick's comment in the same thread.

Mobile Apps - Sound Meter | Color Analyzer | SMBC | Football Doodles

modified 6-Jan-16 1:39am.

Chris Maunder6-Jan-16 3:15

6-Jan-16 3:15

a) It's not the same person
b) What action should I take if it were? People are allowed to have their view and 3 votes isn't abuse. Not allowing someone to say "I don't agree with this" is not nice.

I get that it's disappointing, and I get that there are spurious votes, but we've put a lot of work into making the system resilient to (potentially) poor votes and the benefits of free expression absolutely outweigh the slings and arrows of a downvote.

cheers
Chris Maunder

Abhinav S6-Jan-16 3:53

Abhinav S

6-Jan-16 3:53

Let me tell you its more than 3.
I just put three links in here.

Mobile Apps - Sound Meter | Color Analyzer | SMBC | Football Doodles

Nish Nishant6-Jan-16 3:17

Nish Nishant

6-Jan-16 3:17

I think Chris is suggesting that it's within the expected confines of his voting system for someone to go through a member's posts/answers and down vote those that he/she feels to be sub-par (which is always a subjective thing). There's no way around it really. I guess the trick is to only respond when you are absolutely sure of your answer. Or if someone responds with a better one, delete yours before someone can down vote it.

Regards,
Nish

Website: www.voidnish.com
Blog: voidnish.wordpress.com