Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




20019 posts

Uber Geek
+1 received by user: 3696

Trusted
Subscriber

Topic # 50091 21-Nov-2009 23:30
Send private message

Now, I am not the sort of person to encourage this, but did you know you can just pop in a name of someone on trademe, and then an email address of something insulting, and its just listed? There is no verification of the trademe accound, none of the email, none of the phone number - they just get listed. So if I wanted to really annoy someone (assuming the site gets popular) I can put a popular trademe sellers name in, and their number, and they would get loads of calls. Emails - same deal.





Richard rich.ms

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3


20019 posts

Uber Geek
+1 received by user: 3696

Trusted
Subscriber

  Reply # 275059 21-Nov-2009 23:34
Send private message

No privacy policy either.





Richard rich.ms

BDFL - Memuneh
58483 posts

Uber Geek
+1 received by user: 9934

Administrator
Trusted
Geekzone
Subscriber

  Reply # 275073 22-Nov-2009 00:15
Send private message

You have the option to upload your own details - but the bit I didn't like on that page was "Upload details of traders you have dealt with in the past or details you gather in the future"...

I don't like the idea of anyone uploading MY email address there. A spammers paradise it seems.




 
 
 
 




20019 posts

Uber Geek
+1 received by user: 3696

Trusted
Subscriber

  Reply # 275077 22-Nov-2009 00:35
Send private message

the lack of any verification that it is your tm account you are claiming is more troubling to me.
http://www.detailsme.co.nz/search/show/118

Just added some crap as another address - no way to remove it, doesnt sanity check it. Someone with some sql knowledge want to have a shot at a drop on it?




Richard rich.ms

I'm @nate
6287 posts

Uber Geek
+1 received by user: 373

Moderator
Trusted
Subscriber

  Reply # 275078 22-Nov-2009 00:38
Send private message

Interesting concept, poor implementation.

Wonder what TradeMe's legal stance is on it - do they own your nickname and details so can claim copyright?






20019 posts

Uber Geek
+1 received by user: 3696

Trusted
Subscriber

  Reply # 275083 22-Nov-2009 00:59
Send private message

Interesting...

http://www.detailsme.co.nz/search/show/132

This seems weird this place, its got lots of code behind it, a bit of thought into the graphical content, and yet it violates the most basic of things about sanitizing user input.

" onclick="alert('value')

as an email address, and it lets it run for page visitors.

Oh - my - god... Please tell me that this isn't the product of current "learn to make website" courses that are being taught.

Seems to handle into lt and gt - so no stylesheet fun, perhaps an external .js could be called, Im tired and it will probably be fixed or gone tomorrow. Someone should have some fun while it lasts.




Richard rich.ms

2051 posts

Uber Geek
+1 received by user: 469


  Reply # 275111 22-Nov-2009 09:55
Send private message

Oh, this site is much to funny. You can type alpha characters in the Phone Number boxes... :D

424 posts

Ultimate Geek
+1 received by user: 2


  Reply # 275114 22-Nov-2009 10:09
Send private message

I added fake details for myself and my partner. Better safe than sorry.

I'm @nate
6287 posts

Uber Geek
+1 received by user: 373

Moderator
Trusted
Subscriber

  Reply # 275125 22-Nov-2009 10:43
Send private message

c71931f: I'm guessing this is probably the site creator? http://www.detailsme.co.nz/search/show/1


Someone has added fake details to that first profile.  They are using jQuery (common Javascript library) for validation, I do hope they are doing it server side as well, as anyone who turns off Javascript can easily get around this.




1539 posts

Uber Geek
+1 received by user: 39

Trusted

  Reply # 275134 22-Nov-2009 11:23
Send private message

timestyles: I added fake details for myself and my partner. Better safe than sorry.


too bad other users can still add details for you after you already have some.

25173 posts

Uber Geek
+1 received by user: 5029

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 275185 22-Nov-2009 14:21
Send private message

It'll be interesting to see what Trade Me's lawyers think of their logo.

While it may not necessarily breach an existing TM it's similair enough that people could believe there was an association with Trade Me. This in itself is enough to find yourself trying to fight a legal battle you probably won't win.

1539 posts

Uber Geek
+1 received by user: 39

Trusted

  Reply # 275187 22-Nov-2009 14:26
Send private message

c71931f: Lol just attempted to write a long amount of email addys etc..to be told the member name already exists.



search for your user then click add more contact details


Im currently at 50 emails

25173 posts

Uber Geek
+1 received by user: 5029

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 275201 22-Nov-2009 15:11
Send private message

Looks like virtually everybody now has trashy comments linked to their accounts.

Big Fail.

555 posts

Ultimate Geek
+1 received by user: 60


  Reply # 275238 22-Nov-2009 17:56
Send private message

Looks like it has been taken offline - prompts for username/password currently when you try to access it.

I did a bit of digging, and found the following trader name on TradeMe which is linked to the owner of the detailsme.co.nz domain name. Trader Name is: cartrader

I was just going to look up to see if he was listed on detailsme.co.nz...

The website is a totally bad idea for a whole lot of reasons IMO.

2051 posts

Uber Geek
+1 received by user: 469


  Reply # 275240 22-Nov-2009 18:18
Send private message

They didn't even have a contact page so you could tell them what was wrong. Sounds like they got the idea though.

424 posts

Ultimate Geek
+1 received by user: 2


  Reply # 275270 22-Nov-2009 19:59
Send private message

The only 100% accurate way of setting up a website with this idea is either for detailsme to provide auctions on Trademe and for people to bid $1 using buy now, and then detailsme will know the accurate email address, or for people to register with detailsme, then they are presented with a code. They place this code on an auction that they run and detailsme links the two together. Why didn't they think of this?


By the way, this isn't the only website that is using Trademe to annoy people.  Votemenot has been stealing forum data from Trademe's forums for the last year.

 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Thurrott says Microsoft Surface is dead last for reliability
Posted 16-Aug-2017 15:19


LibreOffice 5.4 works better with Microsoft Office files
Posted 16-Aug-2017 13:32


Certus launches Cognition
Posted 14-Aug-2017 09:31


Spark adds Cambridge, Turangi to 4.5G network
Posted 10-Aug-2017 17:55


REANNZ network to receive ongoing Government funding through to 2024
Posted 10-Aug-2017 16:05


Chorus backhaul starts with 2degrees
Posted 10-Aug-2017 15:49


New Zealanders cool on data analytics catching benefit fraud
Posted 10-Aug-2017 09:56


New Zealanders wary of wearable biometrics: Unisys
Posted 9-Aug-2017 09:39


Unisys Security Index 2017: How New Zealand compares
Posted 8-Aug-2017 15:05


Chorus to provide national backhaul to 2degrees
Posted 8-Aug-2017 11:26


D-Link releases next generation managed gigabit switches
Posted 8-Aug-2017 11:24


How Microsoft killed Windows Phone
Posted 7-Aug-2017 18:39


Protecting the 12.9-inch iPad Pro: Covers, sleeves
Posted 7-Aug-2017 12:14


Why New Zealand outplayed Australia on the NBN
Posted 6-Aug-2017 18:09


Talking VPNs on Radio NZ Nine-to-Noon
Posted 4-Aug-2017 13:56



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.