7 ms·

I know a large number of people here are against using vulnerabilities to do anything but in all honesty we need more of these kind of deviants (the ones who do

by buugs 18y ago

I know a large number of people here are against using vulnerabilities to do anything but in all honesty we need more of these kind of deviants (the ones who do little to no harm while exposing bugs and glitches). Sure we could all wish for a world where everyone followed rules and respected everyone else so much they could leave their doors unlocked but I think everyone would settle for more people like this. That is if he was honest in the interview and what he did.

dbul 18y ago
I wonder if there is an (inexpensive) service where people would be given free reign on a dev site? If not, I imagine one could be made kind of like rent-a-coder: every time a user found an exploit, the site owner would give them karma for credibility and a commission fee.
pxlpshr 18y ago
The problem with that assumption is the same problem people make with consumers; you're expecting them to be rational. This guy was launching a Twitter-clone and blatantly attacked the Twitter service. If it wasn't for the fear of repercussions in regard to JAIL TIME, I doubt he would have ever come clean. “I am the person who coded the XSS which then acted as a worm when it auto updated a users profile and status, which then infected other users who viewed their profile. I did this out of boredom, to be honest. I usually like to find vulnerabilities within websites and try not to cause too much damage, but start a worm or something to give the developers an insight on the problem and while doing so, promoting myself or my website.” OH RLY?! Promoting yourself and your website by writing code that, despite his ridiculously naive belief, reflects what MILLIONS OF CONSUMERS COMPLETELY DESPISE in the form of disruptive viri, malware, spam, etc. Absolutely everything a consumer hates, he decided to be a marketing gimmick to attract people to his web site. In case he didn't get the memo, honest twitter-app developers have a difficult enough time convincing users to give them their l/p for value-added services that have no intention of creating disorder. Thanks for making that job easier. Jesus h...
- zaidf 18y ago
  >he decided to be a marketing gimmick to attract people to his web site. (1) At least it was only a marketing gimmick. Do you not know how much more damage a worm such as this could do if the author chose to? (2) You make it sound like it was some well thought out scheme for him to become a millionaire. No, it was something he seems to have launched and it just caught fire and spread like crazy. For a 17-year old, I would say this is pretty expected behavior. Edit: Just read that the worm apparently deleted buncha tweets. If that is the case, that is pretty bad and crossing the "funny" line.
  - pxlpshr 18y ago
    (3) If you're going to quote anybody, at least quote the source. Mikeyy explained to BNO News that he created Stalk Daily from “boredom” and because he “needed a way to make money.” Sounds to me like premeditated criminal intent.
- buugs 18y ago
  I didn't say it was a good marketing ploy or anything but was going off the thought that he didn't do much damage, if he did end up deleting data or something along those lines it would be a bad thing. I was just hoping he was honest in saying he did it to point out an exploit which is what twitter needs since it is growing so quickly. Developing twitter apps should be an unsure market as it is new to the masses and extensive security testing should be done. I don't condone people breaking into websites or messing around with exploits but it happens and the less harm people do the better.

by buugs 18y ago

dbul 18y ago

I wonder if there is an (inexpensive) service where people would be given free reign on a dev site? If not, I imagine one could be made kind of like rent-a-coder: every time a user found an exploit, the site owner would give them karma for credibility and a commission fee.

pxlpshr 18y ago

The problem with that assumption is the same problem people make with consumers; you're expecting them to be rational. This guy was launching a Twitter-clone and blatantly attacked the Twitter service. If it wasn't for the fear of repercussions in regard to JAIL TIME, I doubt he would have ever come clean. “I am the person who coded the XSS which then acted as a worm when it auto updated a users profile and status, which then infected other users who viewed their profile. I did this out of boredom, to be honest. I usually like to find vulnerabilities within websites and try not to cause too much damage, but start a worm or something to give the developers an insight on the problem and while doing so, promoting myself or my website.” OH RLY?! Promoting yourself and your website by writing code that, despite his ridiculously naive belief, reflects what MILLIONS OF CONSUMERS COMPLETELY DESPISE in the form of disruptive viri, malware, spam, etc. Absolutely everything a consumer hates, he decided to be a marketing gimmick to attract people to his web site. In case he didn't get the memo, honest twitter-app developers have a difficult enough time convincing users to give them their l/p for value-added services that have no intention of creating disorder. Thanks for making that job easier. Jesus h...

zaidf 18y ago
>he decided to be a marketing gimmick to attract people to his web site. (1) At least it was only a marketing gimmick. Do you not know how much more damage a worm such as this could do if the author chose to? (2) You make it sound like it was some well thought out scheme for him to become a millionaire. No, it was something he seems to have launched and it just caught fire and spread like crazy. For a 17-year old, I would say this is pretty expected behavior. Edit: Just read that the worm apparently deleted buncha tweets. If that is the case, that is pretty bad and crossing the "funny" line.
- pxlpshr 18y ago
  (3) If you're going to quote anybody, at least quote the source. Mikeyy explained to BNO News that he created Stalk Daily from “boredom” and because he “needed a way to make money.” Sounds to me like premeditated criminal intent.
buugs 18y ago
I didn't say it was a good marketing ploy or anything but was going off the thought that he didn't do much damage, if he did end up deleting data or something along those lines it would be a bad thing. I was just hoping he was honest in saying he did it to point out an exploit which is what twitter needs since it is growing so quickly. Developing twitter apps should be an unsure market as it is new to the masses and extensive security testing should be done. I don't condone people breaking into websites or messing around with exploits but it happens and the less harm people do the better.