7 ms·

Self-referential URL

62 points by runn1ng 14y ago

notatoad 14y ago
Nice loophole. I am going to assume you got to that URL by some means other than the previous page, and are therefore not violating any licenses.
- shawnz 14y ago
  On that note, the page linked is hereby released into the public domain. Of course I don't own it, but as indicated on the page itself, the referrer specifies the license.
  - bdonlan 14y ago
    Where does it say that on that page? It says "Thank your (sic) for accepting the license agreement.", but it doesn't say anything about 'the referrer', and in fact links to the license agreement that it claims we've accepted.
    - anonymoushn 14y ago
      It doesn't say anything like that on the page, but it does in the URL: publishing_this_url_is_probited_by_the_license_you_accepted_getting_here_from_the_previous_page.
      - ChristianMarks 14y ago
        The previous page is, by definition, the page you were viewing previously. Which could be almost any page, including this one.
      - joesb 14y ago
        But does the document say the URL is meant to be read as instruction or agreement?
simonsarris 14y ago
And here I was expecting tomfoolery! I used to do something similar with this early into the beta of my product by using LocalStorage. If someone went to the URL without first seeing the license, the page would be redirected back at the license. I see no reason why they can't just do that here. ~~~ ...If you do want some self-referential URL tomfoolery: https://twitter.com/simonsarris/status/223794554040623104 https://twitter.com/simonsarris/status/223794554040623104
- mreid 14y ago
  Here's a self-referential URL that doesn't use any URL forwarding/shortening service: https://twitter.com/#!/selfrefer/status/3128391843 https://twitter.com/#!/selfrefer/status/3128391843
  - deleted 14y ago
    [deleted]
  - rpearl 14y ago
    Reminds me of http://bit.ly/6EzdE http://bit.ly/6EzdE
  - damncabbage 14y ago
    I would love to know how this was done. Given you can't edit tweets, and the ID of said new Tweet is going to change rapidly (given the number of new Tweets per second). Did it involve basically predicting what the number was likely to be by observing the current posting rate, tweeting a bunch of times, and then stopping when one of the tweets matched? Or am I missing something?
    - mhielscher 14y ago
      It involves multiple redirects. One goes to http://simonsarris.com/recurse http://simonsarris.com/recurse, which surely can be modified at any time. So, goo.gl short link to a controlled resource that shortly afterward is made to point back to the tweet.
deleted 14y ago
[deleted]
polemic 14y ago
4 (a) of the agreement says: > "shall not post, distribute, transfer, loan, lease, rent, license, market, sell, or otherwise provide the Software to any third party, and shall not copy, reverse compile, reverse engineer or disassemble the Software, the sole exception being that a copy of the Software may be made for back-up purposes;" So how is sharing the download page URL prohibited by the agreement (4 ((a))?
- delinka 14y ago
  Looks like someone mistakenly thought "shall not post [...] the Software" applied to links to the software. This language clearly does not mention links. I'm sure (:-s) the surge in traffic with an incorrect referrer will prompt them to modify the language in the agreement.
zck 14y ago
Let's assume this site does exactly what the author thinks it does, and by clicking "accept", you agree to never give anyone the url submitted here. How, then, could runn1ing have submitted this link? Let's look at the page containing the license agreement: http://www.stanford.edu/~laurik/.book2software/ http://www.stanford.edu/~laurik/.book2software/ . Let's assume that opening a page doesn't make you agree to any of its content, so you can read the agreement without being bound to it. Look at the source of that page. Beyond the boilerplate "you can't sue us for our software kicking your puppy; we get your firstborn child unless it's ugly", there's a <button> element. Its _onclick_ method? window.location='publishing_this_url_is_probited_by_the_license_you_accepted_getting_here_from_the_previous_page.html' So simply append that url to the folder in the current page, and you get to the submitted link without ever accepting the terms in the agreement. Besides, as polemic says, 4(a) says nothing about sharing the download url. And also, there's no text on the download page that says that downloading any content indicates you accept the agreement, so you can even download the software without agreeing. The license agreement page does say "BY DOWNLOADING, INSTALLING, COPYING, ACCESSING, OR USING THE SOFTWARE, ... YOU AGREE TO THE TERMS OF THIS AGREEMENT." So, arguably, if you read the agreement page, downloading the software on the download page indicates you agree to the terms. But if you've never seen that page, you haven't agreed to the terms. Oh, and if it's not obvious, I'm not a lawyer. If you mistake any of this for legal advice, please let me know so I can laugh at you.
- xtdx 14y ago
  You could also align the pointer over the button, shine a laser pointer on your mouse button, and have your cat click it for you. Since you didn't click the button, you didn't accept the license. Arguably.
  - derleth 14y ago
    > You could also align the pointer over the button, shine a laser pointer on your mouse button, and have your cat click it for you. Since you didn't click the button, you didn't accept the license. Arguably. Nice try, but no. Courts are run by human beings, who apply their own judgement to the case at hand and take things like that into account. Intent is definitely part of what's considered for most crimes. The legal system is weird, political, too-insular at times, and funny-looking from the outside and the inside, but it's a system that's evolved, in the case of Common Law, in parts from pre-Roman Germanic tribal customs. The system has been dealing with smartasses like you since before your ancestors had been deloused.
jrockway 14y ago
Pretty good viral marketing plan.
some1else 14y ago
The acceptance of terms (clicking Agree on the previous page), can store a value in a session variable, or post a parameter to the site in question, which could then safely determine whether the user is authorized to see the content.

62 points by runn1ng 14y ago

Nice loophole. I am going to assume you got to that URL by some means other than the previous page, and are therefore not violating any licenses.

shawnz 14y ago
On that note, the page linked is hereby released into the public domain. Of course I don't own it, but as indicated on the page itself, the referrer specifies the license.
- bdonlan 14y ago
  Where does it say that on that page? It says "Thank your (sic) for accepting the license agreement.", but it doesn't say anything about 'the referrer', and in fact links to the license agreement that it claims we've accepted.
  - anonymoushn 14y ago
    It doesn't say anything like that on the page, but it does in the URL: publishing_this_url_is_probited_by_the_license_you_accepted_getting_here_from_the_previous_page.
    - ChristianMarks 14y ago
      The previous page is, by definition, the page you were viewing previously. Which could be almost any page, including this one.
    - joesb 14y ago
      But does the document say the URL is meant to be read as instruction or agreement?

simonsarris 14y ago

And here I was expecting tomfoolery! I used to do something similar with this early into the beta of my product by using LocalStorage. If someone went to the URL without first seeing the license, the page would be redirected back at the license. I see no reason why they can't just do that here. ~~~ ...If you do want some self-referential URL tomfoolery: https://twitter.com/simonsarris/status/223794554040623104 https://twitter.com/simonsarris/status/223794554040623104

mreid 14y ago
Here's a self-referential URL that doesn't use any URL forwarding/shortening service: https://twitter.com/#!/selfrefer/status/3128391843 https://twitter.com/#!/selfrefer/status/3128391843
- deleted 14y ago
  [deleted]
- rpearl 14y ago
  Reminds me of http://bit.ly/6EzdE http://bit.ly/6EzdE
- damncabbage 14y ago
  I would love to know how this was done. Given you can't edit tweets, and the ID of said new Tweet is going to change rapidly (given the number of new Tweets per second). Did it involve basically predicting what the number was likely to be by observing the current posting rate, tweeting a bunch of times, and then stopping when one of the tweets matched? Or am I missing something?
  - mhielscher 14y ago
    It involves multiple redirects. One goes to http://simonsarris.com/recurse http://simonsarris.com/recurse, which surely can be modified at any time. So, goo.gl short link to a controlled resource that shortly afterward is made to point back to the tweet.

deleted 14y ago

[deleted]

polemic 14y ago

4 (a) of the agreement says: > "shall not post, distribute, transfer, loan, lease, rent, license, market, sell, or otherwise provide the Software to any third party, and shall not copy, reverse compile, reverse engineer or disassemble the Software, the sole exception being that a copy of the Software may be made for back-up purposes;" So how is sharing the download page URL prohibited by the agreement (4 ((a))?

delinka 14y ago
Looks like someone mistakenly thought "shall not post [...] the Software" applied to links to the software. This language clearly does not mention links. I'm sure (:-s) the surge in traffic with an incorrect referrer will prompt them to modify the language in the agreement.

zck 14y ago

Let's assume this site does exactly what the author thinks it does, and by clicking "accept", you agree to never give anyone the url submitted here. How, then, could runn1ing have submitted this link? Let's look at the page containing the license agreement: http://www.stanford.edu/~laurik/.book2software/ http://www.stanford.edu/~laurik/.book2software/ . Let's assume that opening a page doesn't make you agree to any of its content, so you can read the agreement without being bound to it. Look at the source of that page. Beyond the boilerplate "you can't sue us for our software kicking your puppy; we get your firstborn child unless it's ugly", there's a <button> element. Its _onclick_ method? window.location='publishing_this_url_is_probited_by_the_license_you_accepted_getting_here_from_the_previous_page.html' So simply append that url to the folder in the current page, and you get to the submitted link without ever accepting the terms in the agreement. Besides, as polemic says, 4(a) says nothing about sharing the download url. And also, there's no text on the download page that says that downloading any content indicates you accept the agreement, so you can even download the software without agreeing. The license agreement page does say "BY DOWNLOADING, INSTALLING, COPYING, ACCESSING, OR USING THE SOFTWARE, ... YOU AGREE TO THE TERMS OF THIS AGREEMENT." So, arguably, if you read the agreement page, downloading the software on the download page indicates you agree to the terms. But if you've never seen that page, you haven't agreed to the terms. Oh, and if it's not obvious, I'm not a lawyer. If you mistake any of this for legal advice, please let me know so I can laugh at you.

xtdx 14y ago
You could also align the pointer over the button, shine a laser pointer on your mouse button, and have your cat click it for you. Since you didn't click the button, you didn't accept the license. Arguably.
- derleth 14y ago
  > You could also align the pointer over the button, shine a laser pointer on your mouse button, and have your cat click it for you. Since you didn't click the button, you didn't accept the license. Arguably. Nice try, but no. Courts are run by human beings, who apply their own judgement to the case at hand and take things like that into account. Intent is definitely part of what's considered for most crimes. The legal system is weird, political, too-insular at times, and funny-looking from the outside and the inside, but it's a system that's evolved, in the case of Common Law, in parts from pre-Roman Germanic tribal customs. The system has been dealing with smartasses like you since before your ancestors had been deloused.

jrockway 14y ago

Pretty good viral marketing plan.

some1else 14y ago

The acceptance of terms (clicking Agree on the previous page), can store a value in a session variable, or post a parameter to the site in question, which could then safely determine whether the user is authorized to see the content.