Appearing as other BHW members (big security issue)

Status
Not open for further replies.
wizard04

wizard04

Elite Member
Joined
Apr 1, 2014
Messages
2,729
Reaction score
2,622
I am appearing as other BHW members and it repeating constantly. I think this is a big security issue as others can exploit this.
I didn't try opening any PM probably after a few second you can't but someone maybe can and misuse the info.

In the last 30 min I have changed to X6-8 people and I have decided to make screenshots of the lat 3 just to show what is going on and how risky it is.
wtf11.jpg

wtf33.jpg

wtf2.jpg
 
Advertise on BHW
i wouldnt say its a security issue but its definitely a privacy issue. Imagine i ghost logged in as someone else, went to look at my private messages, and saw them talking about me or someone or even mentioning their niches etc. i know you cant read the messages, but the title says a lot sometimes
 
Come on guys, its the internet, and the best forum on it, cut them a bit slack, i'm sure they are working hard to get it fixed
 
Due to varnish/nginx maybe. I had spent several days fixing up my sites for same type of issues.
 
I don't think it's a real security issue but like said above it is a privacy issue.
For example i tried to acces http://www.blackhatworld.com/blackhat-seo/profile.php?do=editavatar by logging in and directly going to the url (like the error with your inbox) but it doesnt seem to work so i don't think you need to worry about getting your account changed.

also i think it can be pretty funny sometimes.Schermopname (207).jpg
 
Last edited:
I had the same issue today, now everything is fine. it seems that the problem is already solved.
 
Probably its not a security but we can't be sure. But still its enough just to see the PM's and you will know what all about. I have changed two more times, its kinda annoying.
 
I thought it's just me, appearing as someone else.
 
If someone is appearing as me and can see my PM's just ti give a heads up, its full with Gay porn images.
 
As neonskull said, we are aware of the problem and we're working on it. The glitch only affects the display and you cannot do anything to another member's displayed profile, including opening PM's. If you're concerned about the subject line being visible, archiving PM's in folders and deleting old messages is good practice and, while we get this sorted out, will prevent them from being seen if the inbox is displayed incorrectly.
 
Last edited:
Haha kinda funny you had my profile in there. I haven't had this happen to me yet
 
Probably not the best time of my life to be sending my papal password on PM's title
 
Didn't see an update in past couple of days, so, fyi... I ran into this issue today. I assume it is still WIP.
 
Unfortunately, yes. We are working on it as a matter of urgency. There hasn't been an update yet because we want to make sure it's resolved instead of posting anything glib or meaningless.

Diamond Damien's set up a master thread to discuss this : http://www.blackhatworld.com/blackh...ome-different-profile-name-caching-issue.html. please continue any discussions there. It's important that we have one point of contact where everyone can get the same information so I'll close this thread off now.
 
Advertise on BHW
Status
Not open for further replies.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top