Poe.xyz.is; suspected cause for compromised accounts?

Trust....No one.
"
derbefrier wrote:
"
nomemory wrote:
As a programmer, I can say that the code you've shown is inoffensive, and cannot "hijack" your POE account.

You should apologize!



Apologize for asking a question? Just because some people here are being overly sensitive to an honest question doewnt mean he did something wrong you know. He didnt make any accusations just asked if it was possible now that he has has answer what exactly do you think he should apologize for?


He should at a minimum edit his first post to say that it was a mistake and nothing about the lines of code he posted were malicious. As a programmer, and as many other programmers have stated, there is nothing wrong with these lines. They're pretty standard. Making these accusations would be like me trying to read an X-Ray and telling a person they might have cancer based on 15 minutes of googling.

How many people read all of the comments to realize that the OP is incorrect. This is also bad because the thread title is very sensationalist. The anecdotal evidence of a friend also being hacked is also a case of coincidence not being causation. I bet both of those people visited google, but it is not receiving any blame even though it has more tracking code than pretty much any other site.

So, I don't think the OP needs to issue a letter of apology, but I think it would be common courtesy to edit the post and the title(if possible) to point to the fact that his original hypothesis was incorrect. This would go a long way in clearing up any confusion and making sure XYZ's name stays clean.
Seems like more of an attack of character against the website to lower traffic and have less competition when looking up cheap equips.

Tracker doesn't mean malicious, many websites track user habits (Do people click on this link or that link more. what times is the website most active, how many users are viewing the website, ect)

Someone attempted to access my account from Beijing but the website verification blocked it. I used an old non-unique password for this account that I had used in the past. Its pretty obvious that password ended up on a list somewhere and it probably gets tried on a bunch of websites with one of my old usernames, and it just happened to line up here. I know I keep my computer secure and I practice safe browsing habits. But things happen when you get careless/lazy. Tough break.

I would be suspicious if it was an entirely unique password/email you have never used for anything else, And always from a secure computer though. But somehow I doubt that is the case.
Last edited by jerot on Mar 1, 2013, 1:21:12 PM
"
nomemory wrote:
As a programmer, I can say that the code you've shown is inoffensive, and cannot "hijack" your POE account.

You should apologize!

You mean a bad programmer, couse u cant see the JS file there, so how can u possibily know its safe?
IGN: Ziggro
"
You should apologize!


Yes he should. The message is only a tip-toe step from being LIBELOUS PER SE.

This whole thread should be locked or even deleted.

"
Courageous wrote:
This whole thread should be locked or even deleted.


^
Things with "increased" and "decreased" in the tooltip are additive ... where as "More" or "Less" are multiplicative ...
"
ziggro wrote:
"
nomemory wrote:
As a programmer, I can say that the code you've shown is inoffensive, and cannot "hijack" your POE account.

You should apologize!

You mean a bad programmer, couse u cant see the JS file there, so how can u possibily know its safe?


You mean the JS file that he writes the URL of at the beginning of the quoted part of the code? If you open it, you see it is the minified piwik.js file that when compared to the source project is identical character for character.
"
ziggro wrote:
"
nomemory wrote:
As a programmer, I can say that the code you've shown is inoffensive, and cannot "hijack" your POE account.

You should apologize!

You mean a bad programmer, couse u cant see the JS file there, so how can u possibily know its safe?


You not knowing what you are talking about does not make him a bad programmer.
Go to the site, right click and then view source.
Take your time and read everything you are suspicious about.
WTB 15%+ Q Freezing Pluse
what do u want for it?
Last edited by Alexufl on Mar 20, 2013, 11:05:22 PM

Report Forum Post

Report Account:

Report Type

Additional Info