digg

Facebook Connect Join Digg About

Woops! Another Exploit of Digg's Friend Referral Feature

pronetadvertising.com — Digg's new friend referral feature has had some unintended consequences... By adding a snippet of code, people can automatically force-add themselves as your friend without your permission and without you even knowing!

Who dugg this?

Digg DudeWhat is Digg?

Digg is a place for people to discover and share content from anywhere on the web. Digg surfaces the best stuff as submitted and voted on by the community. Take the Tour to learn more.

10 Comments

show profanity settings
expand all
  • Wackos, on 10/12/2007, -0/+2Hey, grendelboogie, we tested it out and sure enough, it was only half way fixed!!! You guys were still screwed up. NOW it's fixed.
  • grendelboogie, on 10/12/2007, -1/+3Skitzzo,

    I did.Here's the link to the original blog that demoed the issue:

    http://www.thegooglecache.com/rants-and-raves/new-digg-feature-friend-spamming-proof-of-concept/

    which msaleem also links to. If you read to the end of the comments, you can see that there are reports it doesn't work anymore.

    Also, here at digg, we have verified that this particular exploit doesn't work anymore. Onto looking for the next one...
  • TheAttacks, on 10/12/2007, -2/+4this is still in the queue, digg's crew must be at lunch
  • Skitzzo, on 10/12/2007, -2/+3grendel, if you've read the post then you should realize that the author states it still worked for him as of 2 am this morning. How do you explain that?

    Maybe before you move onto "the next one" you should investigate this one a bit more?
  • Skitzzo, on 10/12/2007, -1/+2What does that have to do with this story? They created it and it can easily be abused... that's news in my book.
  • grendelboogie, on 10/12/2007, -0/+1@Skitzzo,

    Try it and let us know if there are still problems. If you are automatically added, we'll investigate further.
  • Skitzzo, on 10/12/2007, -1/+2@grendel, fair enough. I'll give it a go and let you know. (I'm a poet and didn't know it - shoot me know please)

    P.S. Did this story get removed from the upcoming queue?
  • TheAttacks, on 10/12/2007, -3/+3insane. . .
  • Skitzzo, on 10/12/2007, -2/+1@grendelboogie, here's an idea... RTFA!
  • grendelboogie, on 10/12/2007, -3/+2This was fixed early last Friday morning. Nothing to see, move along.

  • Add a Comment

    Login or register to comment!
    Or, sign-in super fast with your Facebook account ...


© Digg Inc. 2009 — Content created and posted by Digg users is dedicated to the public domain | Terms of Use Updated | Privacy Policy
DIGG, DIGG IT, DUGG, DIGG THIS, Digg graphics, logos, designs, page headers, button icons, scripts, and other service names are the trademarks of Digg Inc.