i'm not quite sure whether it's naughty or not, nevertheless. just recenty i thought of starting looking for exploits on different websites and reporting them t

i'm not quite sure whether it's naughty or not, nevertheless. just recenty i thought of starting looking for exploits on different websites and reporting them to administration. during first two weeks, I've found two small communities (one was for writers and second one for designers), and found JS-injection vulnerability on both. On the first one i decided to stay anonymous, and whenever admin displayed info (after the fix), all the people in community started calling that "anonymous" words and saying that i've got nothing to do except for looking how to find these things in someone else's nice and quiet website. another (third) website was for keyboard-addicts. they were competing on who types faster. i wrote a little script, and got my typing speed up to 14K symbols per minute, they asked me to confirm it though the capture image, I confirmed it to some point using first several words from capture and Google. well, all the people hated me again, since they wanted it to be a "pure competition". even though my intention was to find and report (i was also giving precise explanations on how to fix these things), people still considered me evil. BTW, if you're still using jevix on python systems, you'll be hacked by someone soon, since they allow scirpt tag injection inside of [img]. so be careful, escape strings and treat people who're finding vulnerabilities as _people_ not like they've-got-nothing-else-to-do dogs)