Posts that Yansky is monitoring

Subscribe to Posts that Yansky is monitoring 55 posts found

Jan 29, 2008
hosts 4 posts

Topic: Simple script to replace a link


// ==UserScript==
// @name VcdQuality.com Direct Image
// @namespace http://
// @include http://vcdquality.com*
// ==/UserScript==

var lianks = document.evaluate(
"//a[contains(@href, 'index.php?page=sample&id=')]",
document, null, XPathResult.UNORDERED_NODE_SNAPSHOT_TYPE, null);

for (var i = 0; i < lianks.snapshotLength; i++) {
var link = lianks.snapshotItem(i);
link.href = link.href.replace("index.php?page=sample&id=","sample/id")+'.jpg'
}

 
Jan 27, 2008
Mikado 499 posts

Topic: My script is teh broken

Your HEAD request returns tons of HTTP 200 instead of expecting 303, but no clue why.
Also it crashes because you're trying to get status before ensuring readyState is greater than 1.

 
Jan 5, 2008
LouCypher 208 posts

Topic: Why can't you stop all this scrap all nonsense?

centurygalactus has 116 scriptsscraps:O

Find more: http://userscripts.org/users

 
Jan 4, 2008
Jordon Kalilich 35 posts

Topic: Why can't you stop all this scrap all nonsense?

I vote for deleting as well. Spamming the site and having hundreds of duplicate scripts should not be tolerated. It's not a matter of censorship; having one and only one of these scrap scripts is just fine. But letting the site get flooded is an inconvenience to everyone (visitors having difficulty browsing the site, users flagging all of the scripts, administrators having to hide them), and we shouldn't have to bend to it. Not only should the excess scripts be deleted, but they should be automatically prevented from being submitted in the future.

 
Jan 4, 2008
psyched 157 posts

Topic: Why can't you stop all this scrap all nonsense?

Why not just check the contents of the scripts and compare them?
I mean obviously these scripts have the same content down to the whitespace.

 
Jan 4, 2008
weezel 1 post

Topic: Why can't you stop all this scrap all nonsense?

http://userscripts.org/users/40419/scripts

and this guy .. approx 30 scripts all exactly the same, and the rest of the scrips appearing to be the same. i cant even browse the site without seeing most of one pages listings being these scrap scripts.

 
Jan 2, 2008
Marti 10 posts

Topic: GM_xmlhttpRequest referer not passing?

@gimmic

I've confirmed that it's definitely the browser that is filtering it... however it doesn't look like the Greasemonkey team is going to make any effort to implement the fix anytime in the near future. Only suggestion for now is to use the DOM XMLHttpRequest in an unsafeWindow over the Greasemonkey API implementation or some combination of both to achieve what you need.

 
Dec 13, 2007
Joel H 342 posts

Topic: Why can't you stop all this scrap all nonsense?

My vote is for deleting these scripts. There is clearly a general consensus about this being a problem, but deletions seem out of the question due to censorship issues (I think). My suggestion to the admins is to delete these scripts under the 'no duplicates' script, perhaps leaving the original (as pointed out in the above post). No censorship violations, and no more orkut scripts. If some of them complain about the link being broken, we can kindly ask them to host the script elsewhere.

Anyone else?

-Joel

 
Dec 11, 2007
Marti 10 posts

Topic: GM_xmlhttpRequest referer not passing?

Now that I've had enough time to cite references and document Greasemonkey a bit better (which is is important to the explanations I have here), I can get back for a while to u.s.o.

@gimmic
No prob and thanx... yes it is looking more like Mozilla is the culprit, but for reasons unknown. I still don't know whether to file a bug report with them or not... I'll search through their forums and docs soon to see if they have an official standing.

What I didn't say in my response above is about YOUR NAMESPACE... any user script namespace is in what they call in the Sandbox, and of course it is not privileged enough either to send the Referer atom (at least on the machines I have tested). Currently the only way that I have successfully sent a Referer atom is to use the unsafeWindow object, which I'm not thrilled with... I usually block all Referer atoms period, but I know some sites are annoying enough to require them. In that case I usually forge them and apparently that's not possible in chrome or the sandbox using the XMLHttpRequest (XHR for short) method, which presents a very large problem.

@Yansky
That's more or less the solution that I've come to as well, but with Descriptors comment about the extra r shouldn't be in there and depending on what method of the native DOM XHR you want to call will determine which method you use. I make typos all the time, so no big deal... but I'm doing my best to be as accurate as I can here. Unfortunately a host site will see what you do when you utilize unsafeWindow *le sigh*

@Descriptor
Thankx for catching that... I've been WAY busy with GM docs

 
Dec 10, 2007
Descriptor 757 posts

Topic: GM_xmlhttpRequest referer not passing?

The header name is 'Referer', and it's a Request Header.
But according to what Marti wrote, you can use setRequestHeader("Referer", "URL") in that function and it should work.

 
Dec 7, 2007
gimmic 4 posts

Topic: GM_xmlhttpRequest referer not passing?

Wow. Very nice Marti.. so this is starting to kind of look like an issue with FF?

Are you saying that even using XMLHttpRequest the Referer isnt being passed through FF? In other words it's currently not possible in GM to pass Referer properly?

Thanks for the (very) informative update!

 
Dec 4, 2007
Marti 10 posts

Topic: GM_xmlhttpRequest referer not passing?

@gimmic

Well I've poured over TONS of code this weekend, and needed a bit of time to gather my brain cells.

Here's a few things that I've learned about XMLHttpRequest
  • Tamper Data add-on reports raw data and ignores other extensions (that's a big no no by the way).
     
  • Live HTTP Headers add-on correctly reports the headers in cooperation with other add-ons.
     
  • Firefox 2.X also caches header requests... so they will also only show up once in the logs.
     
  • Greasemonkey is "sorta" responsible for not allowing the Referer header atom value to be set, but then again, sorta not!
     
  • Any call to XMLHttpRequest in the chrome namespace (Firefox add-ons use this for those that don't know this) is considered "unprivileged" to modify the Referer header atom value UNLESS there is an event listener that modifies the raw data via the http channel OR there is a component add-on (I think that's XBL, still a bit noob to some of this) that is added to an existing add-on.

    Firefox currently has two sections, that I can find, in their trunk code (and existing releases too) that PURPOSELY BLOCKS OR CLEARS the Referer header atom value from being set in the chrome namespace.
     
  • Any XMLHttpRequest call made via unsafeWindow (e.g. the native DOM object created from a web server) is considered to be "privileged" enough to set the Referer header atom value.
     
These last two points seem backwards... MOST security threats, in my circles, come from commercial entities NOT from scripters... but I know that's not always the case.

Currently Firefox is not following the W3C recommendations on XMLHttpRequest by not allowing the Referer header atom value to be set in the chrome namespace using setRequestHeader.

W3C Working Draft (e.g. a whitepaper or RFC) 26 October 2007 clip from Section 2, setRequestHeader method, Item 6
  • «6. For security reasons, these steps should be terminated if the header argument case-insensitively matches one of the following headers:
    • Accept-Charset
    • Accept-Encoding
    • Connection
    • Content-Length
    • Content-Transfer-Encoding
    • Date
    • Expect
    • Host
    • Keep-Alive
    • Referer
    • TE
    • Trailer
    • Transfer-Encoding
    • Upgrade
    • Via
    »
I may annotate/cite this post further later... but I've been busy putting what I've learned in the last 36 hours into motion and I'm a bit dain bread from all of this.

8D

Other related links
http://groups.google.com/group/greasemonkey-dev/browse_thread/thread/77c94cc17c6b2669
http://wiki.greasespot.net/GM_xmlhttpRequest
 
Dec 3, 2007
D3Death 3 posts

Topic: Why can't you stop all this scrap all nonsense?

Arvid wrote
"How about we make us.o parse new scripts, look for links to orkut communities and automatically send emails notifying orkut admins of abuse and spamming from those specific orkut communites?"

that may be an over kill. But its not possible.
The only way you can notify Orkut admins about a spamming community or profile is by clicking the "Report Abuse" link on the page of that community or profile. [ http://help.orkut.com/support/bin/topic.py?topi... ]

The mails sent to Orkut are Auto-Replies stating that they no longer reply to mails due to massive amount of users

 
Dec 2, 2007
Arvid 116 posts

Topic: Why can't you stop all this scrap all nonsense?

How about we make us.o parse new scripts, look for links to orkut communities and automatically send emails notifying orkut admins of abuse and spamming from those specific orkut communites? Could be overkill.

 
Dec 2, 2007
LouCypher 208 posts

Topic: Why can't you stop all this scrap all nonsense?

Those crappy scrap scripts are more sickening than the "My home page" CSS scripts for MySpace in the old days.

 
Dec 2, 2007
Matthew P. 5 posts

Topic: Why can't you stop all this scrap all nonsense?

Thanks for the explanation, D3Death. I'd unfortunately marked his script as spam before since the code looked so similar, but it should be fine once the admins see your post.

 
Dec 2, 2007
Arvid 116 posts

Topic: Why can't you stop all this scrap all nonsense?

Thanks for clearing up this stuff D3Death. Hopefully we can resolve this situation soon.

 
Dec 2, 2007
D3Death 3 posts

Topic: Why can't you stop all this scrap all nonsense?

oh i see an admin post now

"Does anyone know what/why/... these people are doing this?

What is "scrap all" even for? Something to do with scraping orkut - are people uploading their own versions for money/pride/harm/.."

Well Please read my post above..
and as you can
All The modified version of Scrap All are to spam more and more for your communties

This is the real script
http://userscripts.org/scripts/show/10416

This does not spams.

Plus i want to ask you about Credits thingy.

i'll also paste this link to Mr.Nobody..
so that he can contact you ppl directly

 
Dec 2, 2007
D3Death 3 posts

Topic: Why can't you stop all this scrap all nonsense?

Hello all,

OK let me try to explain to you people what actually happened.
This scrap all is a script which allows a 'message' to be sent to all of your 'friends' on Orkut.

This was created by Brazilian guy named Rodrigo Lacerda and translated to English by a friend of mine called 'Mr Nobody'.

To those who dont know what orkut is, it is a social networking site. and it has got lots of communities [similar to groups on google groups]. ok now what happened was some one copied the code of Mr.Nobody's script [ http://userscripts.org/scripts/show/10416 ] and then added this link in it

var scrapText = document.getElementById("body").value.replace(/%NAME%/g, name).replace(/\[(\/)?link\]/g, "") + "\n\n\n[purple]\n\n\n

[b]To Send common SCRAP to ALL ur Frnds,[link=http://www.orkut.com/CommunityJoin.aspx?cmm=30130377]CLICK HERE[/link]
";

when went who ever got your scrap or who ever will use your script he will auto Spam for you too.

now many ppl on orkut who own communities are posting Mr.Nobody's Script but with link to their community

i was about to post here to ask how to get all those scripts deleted who are not giving credits..

but looks like its becomming a big spam problem too.

Does this site have any policy against the scripts who r "stolen" or "copied without credits to real author"

if yes than most of these scripts can be deleted for it.

While you are thinking about this spam.. also think about the author who created this script but in this but now he has to see all these scripts without credits to him..

 
Dec 2, 2007
znerp 423 posts

Topic: Why can't you stop all this scrap all nonsense?

Maybe I'm just being cynical, but I think that any form of filters can be easily bypassed by them either just modifying the name of the scripts they upload or picking another script to upload instead of this tired 'scrap all' one.

Also, re: CAPTCHAs being used (whether just for people from certain areas or everywhere) -- this has been brought up in different threads, but I think it'd be best to keep all these posts in the one thread -- since these scripts are largely uploaded by unique users, I would assume that they could easily cope with this small hinderance, whereas it might just annoy regular users of us.o.

 
Dec 2, 2007
knk 3 posts

Topic: Why can't you stop all this scrap all nonsense?

Create a filter that blocks out all orkut and "scrap" submissions until this dies down.

 
Dec 1, 2007
Jordon Kalilich 35 posts

Topic: Why can't you stop all this scrap all nonsense?

Thanks for the feed, Arvid. That makes browsing new scripts much easier.

 
Dec 1, 2007
Arvid 116 posts

Topic: Why can't you stop all this scrap all nonsense?

Created a feed with Yahoo Pipes for new scripts which does not contain "orkut" or "scrap" in title or description. Seems to be working fine. Hope you enjoy it :)

 
Dec 1, 2007
NotStyle 3 posts

Topic: Why can't you stop all this scrap all nonsense?

Can't we just delete spamers acc? And do something like filter with words "scrap all", and auto delete of user acc who put this script? =]

 
Dec 1, 2007
Marti 10 posts

Topic: GM_xmlhttpRequest referer not passing?

@gimmic

I don't see anything in the visible code that would indicate it's being filtered by GM... if it works with a direct html call, then the calls in the chrome namespace should have at minimum equal privileges. I'm not ready to do any testing as of yet myself, but when I do, down the road, will report what I find.