3 ms·

One faction known as the Knights of the Button created a Chrome extension called Squire to coordinate button presses in order to keep the timer running for as l

One faction known as the Knights of the Button created a Chrome extension called Squire to coordinate button presses in order to keep the timer running for as long as possible. The craziest thing I've seen so far is that another group known as the Assassins created a fork of that extension that would claim they would press the button, but in fact wouldn't so that the timer would run out. There are groups sabotaging other groups' code based on their goals for the button. https://www.reddit.com/r/Knightsofthebutton/comments/31x3c0/the_squire_we_were_attacked_today/ https://www.reddit.com/r/Knightsofthebutton/comments/31x3c0/...

wnevets 12y ago
someone released a Chrome extension that pressed the button without the users knowledge
abra0 12y ago
Squire dev here. We were DDoSed, infiltrated about 4 times and had an author of another similar extension turn on us. But we will persevere. All hail the great and glorious Button! Long may we serve, long may it live.
- knobs 12y ago
  I've had a look at your code... GTFO! username = r.config.logged; // stealing reddit username and sending them to your own server socket.on('alert_autoclick', thebutton.click() ); // click the button automatically when your server tells it to socket.on('reload', location.reload() ); // reload page when your server asks to inject new code from it and the server code isn't even publicly available... is this a joke? do you know what malware is?
  - abra0 12y ago
    No, never heard of it. What's this 'malware'? Also, you use the squire on your own volition.
    - knobs 12y ago
      you might want to look up 'malware' in the dictionary, you should easily recognize it, it has a picture of squire next to it.
  - georgehotelling 11y ago
    > username = r.config.logged; // stealing reddit username and sending them to your own server That seems like a pretty good unique identifier, but I think it could be hashed for privacy. > socket.on('alert_autoclick', thebutton.click() ); // click the button automatically when your server tells it to Isn't that the whole point of this extension, to click the button when the server tells your browser to? It seems like you're implying that's a bad thing. > socket.on('reload', location.reload() ); // reload page when your server asks to inject new code from it This seems to be the most common JavaScript live updating technique (reload when websocket says so is what grunt watch uses). Again, it seems like you're implying that's not normal.

wnevets 12y ago

someone released a Chrome extension that pressed the button without the users knowledge

abra0 12y ago

Squire dev here. We were DDoSed, infiltrated about 4 times and had an author of another similar extension turn on us. But we will persevere. All hail the great and glorious Button! Long may we serve, long may it live.

knobs 12y ago
I've had a look at your code... GTFO! username = r.config.logged; // stealing reddit username and sending them to your own server socket.on('alert_autoclick', thebutton.click() ); // click the button automatically when your server tells it to socket.on('reload', location.reload() ); // reload page when your server asks to inject new code from it and the server code isn't even publicly available... is this a joke? do you know what malware is?
- abra0 12y ago
  No, never heard of it. What's this 'malware'? Also, you use the squire on your own volition.
  - knobs 12y ago
    you might want to look up 'malware' in the dictionary, you should easily recognize it, it has a picture of squire next to it.
- georgehotelling 11y ago
  > username = r.config.logged; // stealing reddit username and sending them to your own server That seems like a pretty good unique identifier, but I think it could be hashed for privacy. > socket.on('alert_autoclick', thebutton.click() ); // click the button automatically when your server tells it to Isn't that the whole point of this extension, to click the button when the server tells your browser to? It seems like you're implying that's a bad thing. > socket.on('reload', location.reload() ); // reload page when your server asks to inject new code from it This seems to be the most common JavaScript live updating technique (reload when websocket says so is what grunt watch uses). Again, it seems like you're implying that's not normal.