tag:blogger.com,1999:blog-198252422011-04-21T21:02:57.960-07:00KoolAidGuynoreply@blogger.comBlogger11100tag:blogger.com,1999:blog-19825242.post-1134466276709649492005-12-13T01:30:00.000-08:002005-12-13T01:31:16.726-08:00You may think that <b style="color: black; background-color: rgb(160, 255, 255);">Digg</b> is user controlled but that is not the case. <b style="color: black; background-color: rgb(160, 255, 255);">Digg</b> is poorly designed and highly exploitable. I am going to show you how I took control of <b style="color: black; background-color: rgb(160, 255, 255);">Digg</b> today and how easy it was. If you are a <b style="color: black; background-color: rgb(160, 255, 255);">Digg</b> admin I hope you fix this ASAP.<br /><br />I have successfully promoted many stories onto the front page. I have been doing this for the past few months. The steps are easy and anybody can do it. First off I register many accounts. Today alone I have registered the following <a href="http://www.geocities.com/cdbysabb/accounts.txt">accounts</a>.<br />They are seperated by login/password pairs. If you attempt to login using one of these accounts you will get an error message because they have since been banned.<br /><br />With each account I started to kill stories from the front page and in the <b style="color: black; background-color: rgb(160, 255, 255);">digg</b> queue by mass reporting them. A story will be removed with about 7 reports. This is easily accomplished using a bookmarklet. And then I proceeded to <b style="color: black; background-color: rgb(160, 255, 255);">digg</b> random stories with low <b style="color: black; background-color: rgb(160, 255, 255);">digg</b> counts. Again to simplify the process I used a bookmarket.<br /><br />The following is a snapshot of the stories that were mass dugg by me:<br /><br />Pages <a href="http://www.geocities.com/cdbysabb/dugg_page1.htm">1</a>, <a href="http://www.geocities.com/cdbysabb/dugg_page2.htm">2</a>, <a href="http://www.geocities.com/cdbysabb/dugg_page3.htm">3</a><br /><br />This is a snapshot of the <a href="http://www.geocities.com/cdbysabb/frontpage.htm">front page</a>. Notice how the stories that I've mass dugg dominates the front page:<br /><span style="font-style: italic;"><span style="font-weight: bold;">When Worlds Collide, Nice webdesign showcase <b style="color: black; background-color: rgb(160, 255, 255);">Digg</b> sauce, Review of the Web's First News Channel, auto-lock your computer on start-up, REVIEW: ATI's Newest Midrange Card (Radeon X1600 XT), Technology Enabled Leather Jacket, Using Math to Beat the Market, Want to go to the movies? Expect 20 minutes of advertising first., Huge collection of old propaganda.</span></span><span style="font-style: italic; color: rgb(0, 0, 0); font-weight: bold;"></span><br /><br /><br />This is a snap shot of the <a href="http://www.geocities.com/cdbysabb/diggall.htm">diggall</a> page sorted by most diggs. Notice the next stories to be promoted are those that I have dugged.<br /><br />This is obviously a serious design flaw in <b style="color: black; background-color: rgb(160, 255, 255);">Digg</b> and should be fixed immediately. I've come to the realize that this is the method that Albertpacino uses to get his stories onto the front page. In conclusion, Albertpacino is a tool should be banned.<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/19825242-113446627670964949?l=koolaidguy.blogspot.com' alt='' /></div>KoolAidGuynoreply@blogger.com132