the_casualty
Level: 114


POSTS: 3538/5804
POST EXP: 223488
LVL EXP: 15931929
CP: 766.3
VIZ: 117387

Davideo7 : I'm summoning you here because some very dangerous things could happen with the chat rooms.

You can now hack Vizzed and log on as anyone.

The way to do it is simple: have the url copied and pasted into a seperate tab on your browser, then swap out the User ID and the username you prefer from your own, and *BAM* you're on chat as them. For example, say I wanted to log on as big fat cat. My URL is:

http:*//www*.vizzed.com/vizzedboard/prochatrooms/index.php?uid=46981&uname=the_casualty&room=Lobby (minus the stars)

big's URL is:

http:*//www*.vizzed.com/vizzedboard/prochatrooms/index.php?uid=46981&uname=big%20fat%20cat&room=Lobby (minus the stars)

They are so similar that it'd be obvious to anyone with basic mind skills that you can hack it.

I'm not the first one to discover this. From what I've heard, septembern can do it too. And I showed leggy and Mega how to do it, and they can do it too.

There is some sort of system put in place to try and keep you from logging in as someone else, but by simply restarting your computer and re-connecting to the internet seems to pass it.

Attached is a screen shot proving that this is possible.






Image upload: 872x559 totaling 87 KB's.

Cerebus
Timecube
Affected by 'Laziness'

Position: Elite
Since: 09-30-10
From: Vizzed, #thecasualty
Last Post: 293 days
Last Active: 185 days

legacyme3
Level: 204


POSTS: 3246/22386
POST EXP: 1372015
LVL EXP: 121397000
CP: 15017.5
VIZ: 195446

I confirm this.

I did have knowledge of this for a while, but I never really tried it.

Today, I logged into chat as NotJon and wrote a few lines (with permission of course. I'm not a hacker) as him in chat.

It is so easy that even I can do it. And I'm not that intelligent.

If a hacker has the idea to do this, they could hack anyone's accounts.

My suggestion is to remove the current chat until this is fixed, because as is, anyone could be chat banned or impersonated by anyone on site.

Kingler
"But if you close your eyes, Does it almost feel like
Nothing changed at all?
And if you close your eyes, Does it almost feel like
You've been here before?"
Affected by 'Carpal Tunnel Syndrome'

Position: Site Staff
Role: Game Reviewer

Since: 09-14-10
Last Post: 4 hours
Last Active: 39 min.

pikamander64
Level: 20


POSTS: 34/101
POST EXP: 4749
LVL EXP: 38350
CP: 43.0
VIZ: 29771

the_casualty : We're all doomed. They'll figure it out...

Sandslash
IM FINISHED!
Affected by 'Laziness'

Position: Member
Since: 05-23-10
From: IM FINISHED!
Last Post: 621 days
Last Active: 145 days

Davideo7
Level: 270


POSTS: 16124/31511
POST EXP: 2038284
LVL EXP: 327182777
CP: 25200.9
VIZ: 755999

Well apparently this must be a flaw with the current chat room and since I don't have the many hours to look into fixing this myself, the chat rooms will be unavailable for the time being. Expect to see it up again sometime in April.

Thwomp
David Auchampach Owner/Founder/Coder/etc
Affected by 'Carpal Tunnel Syndrome'

Position: Owner
Role: Founder, Developer, Advertiser, Mod, Investor, etc

Since: 12-06-04
From: Wisconsin
Last Post: 17 hours
Last Active: 4 sec.

icrazy
Level: 71


POSTS: 607/2003
POST EXP: 36928
LVL EXP: 3091633
CP: 199.2
VIZ: 51194

OK so that is why I can't join chat I thought I had just been banned from it for some reason

Birdo
my post rank is birdo FUUUUUUUUUUUUUUUUUUU
Affected by 'Laziness'

Position: Trusted
Since: 01-16-11
From: ponyville
Last Post: 712 days
Last Active: 698 days

SunflowerGaming
Level: 77


POSTS: 429/2255
POST EXP: 134694
LVL EXP: 4037013
CP: 417.5
VIZ: 30701

WOW, well I'd rather not have the chat room then get my account hacked. Good to know this is being taken care of.

Caribe
Freelance Graphic Designer
Affected by 'Carpal Tunnel Syndrome'

Position: Trusted
Since: 05-29-10
From: United States
Last Post: 9 hours
Last Active: 9 hours

hackerman
Level: 108


POSTS: 1263/5147
POST EXP: 140083
LVL EXP: 13132943
CP: 930.7
VIZ: 0

i tested it with my brothers works don't worry i went off as soon as i found out hopefully this will be resolved soon i could tell that wasn't leggy talking there

---

(last edited by hackerman on 03-29-11 04:21 PM)

Hero of Hyrule
2nd Place In The June 2011 VCS 7th Place In the July 2011 VCS
Affected by 'Laziness'

Position: Elite
Since: 11-02-10
From: Angel Island
Last Post: 613 days
Last Active: 2 days

legacyme3
Level: 204


POSTS: 3699/22386
POST EXP: 1372015
LVL EXP: 121397000
CP: 15017.5
VIZ: 195446

Zamiel :
BTowns :

Since this is an old thread, and has not been an issue since we got the new chat room, could you close it? All it's gonna do is attract negative attention at this point.

Kingler
"But if you close your eyes, Does it almost feel like
Nothing changed at all?
And if you close your eyes, Does it almost feel like
You've been here before?"
Affected by 'Carpal Tunnel Syndrome'

Position: Site Staff
Role: Game Reviewer

Since: 09-14-10
Last Post: 4 hours
Last Active: 39 min.

BTowns
Level: 72


POSTS: 1493/1929
POST EXP: 135277
LVL EXP: 3286874
CP: 124.0
VIZ: 6632

Oh geez this wasn't closed? Okay, I'll gut it. Yeah, people might not realize this doesn't apply to new new chat and get worried.

Master Stalfos
Computer Engineering Student at UBC
Affected by 'Laziness'

Position: Elite
Since: 03-07-10
From: West Coast Canada
Last Post: 897 days
Last Active: 8 hours