Cerberus is so cool.

[Fhqwghads]

How the hell did linking a KI thread link to some other random persons KI account? My account is not fucked up and I just copy/pasted the URL from my browser, while logged into my account. Wouldn't it have linked to mine or was this just a random fluke?

I dunno how the guy did it, but he managed to copy a session hash that apprently isn't really a hash. Translation: the account is linked to that string, so pasting that link into a browser makes KI think you're that person. Really, really fkn dumb, not on the user's part, but on the person who coded the server to include valid session ID's in a public URL.

[Khamsin]

How the hell did linking a KI thread link to some other random persons KI account? My account is not fucked up and I just copy/pasted the URL from my browser, while logged into my account. Wouldn't it have linked to mine or was this just a random fluke?

It linked to the other person's because his session info was in the URL.

[Dank]

That sucks, but still, how is his session ID in my browser? When I click on the link myself, it goes to KI under my account name, maybe because I have the remember me button pushed.

[Jeryhn]

That sucks, but still, how is his session ID in my browser? When I click on the link myself, it goes to KI under my account name, maybe because I have the remember me button pushed.

The session ID expires after a certain amount of time. That's why it logs into your account, rather than his when you currently click the link. When he logs back into his account, the session ID will change.

As said above, shoddy programming to put the session ID in the URL.

[Dank]

Must have been a recycled session ID, I have no idea who that person is or how his session ID got in my URL bar.

[Devek]

That sucks, but still, how is his session ID in my browser? When I click on the link myself, it goes to KI under my account name, maybe because I have the remember me button pushed.

The session ID expires after a certain amount of time. That's why it logs into your account, rather than his when you currently click the link. When he logs back into his account, the session ID will change.

As said above, shoddy programming to put the session ID in the URL.

Many web based session toolkits for a variety of languages automatically do this when they detect cookies are disabled on the client's browser.

It actually less than shoddy because it lets the user log into the site and use its features when they are using a simple browser that is not advanced enough for cookies or the user is browsing from a computer that doesn't allow cookies like at work.

This sort of thing was considered state of the art in 97 or so, lol.

[Sixtail]

think what you will, i was a good player, a good guy, not a jackass

A good jackass who RMTed?

lolatrmtreasoning

[ono]

I also thought some of his PM's were interesting:

Welcome back sir humps alot:

9832162480

Purchased 08:30PM EDT on 05/02/2005 - used once, not posted on any forums. If Taps needs to use it too, go for it.

lolrmt??

Also, the changes to the account wern't bade by me >.< I only changed his sig to lolrmt, because the picture above was in his messages box But some of the stuff they changed it too was pretty funny.

...

Mystery solved. That was my account on KI, and no idea how all my info got compromised and changed. Just figured all this out today, since I rarely go on KI anymore and tried going there today to see .DAT mining stuff. Guess it just goes to show what happens when looking at drama that doesn't even involve me. And that was a PM with a World Pass.

Edit: And I changed his current avatar to the galka because.....well they smell bad and it looks funny.

I play a galka...