robio said:

Iga_Bobovic said:

SteelAttack said:

Blame Uncharted 2. My wife has been telling me to log in and send you the money, but everytime I approach the TV set Uncharted beckons.

GG buy me New Super Mario Bros Wii and I will shatter both his kneecaps and I will kick Robio in his nuts for no extra charge

I'm just going to go ahead and change my title from God of Trendy to Most Abused Member of the Forums.

It seems customary on the VGPress to inflict some sort of vexation upon you. Not by me, of course. I follow closely and eagerly expect every single post detailing your activities with Miyamoto. Anyone who gets ice cream and plays minigolf with that man shouldn't be kicked in the nuts ever.

SteelAttack said:

robio said:

Iga_Bobovic said:

SteelAttack said:

Blame Uncharted 2. My wife has been telling me to log in and send you the money, but everytime I approach the TV set Uncharted beckons.

GG buy me New Super Mario Bros Wii and I will shatter both his kneecaps and I will kick Robio in his nuts for no extra charge

I'm just going to go ahead and change my title from God of Trendy to Most Abused Member of the Forums.

It seems customary on the VGPress to inflict some sort of vexation upon you. Not by me, of course. I follow closely and eagerly expect every single post detailing your activities with Miyamoto. Anyone who gets ice cream and plays minigolf with that man shouldn't be kicked in the nuts ever.

You may need to go back a few weeks.  I made a couple posts about when he and I were carving Halloween pumpkins and then sorting through our kids Halloween candy.  I really need to find a way to archive those.

bugsonglass said:

robio said:

SteelAttack said:

robio said:

Iga_Bobovic said:

SteelAttack said:

Blame Uncharted 2. My wife has been telling me to log in and send you the money, but everytime I approach the TV set Uncharted beckons.

GG buy me New Super Mario Bros Wii and I will shatter both his kneecaps and I will kick Robio in his nuts for no extra charge

I'm just going to go ahead and change my title from God of Trendy to Most Abused Member of the Forums.

It seems customary on the VGPress to inflict some sort of vexation upon you. Not by me, of course. I follow closely and eagerly expect every single post detailing your activities with Miyamoto. Anyone who gets ice cream and plays minigolf with that man shouldn't be kicked in the nuts ever.

You may need to go back a few weeks.  I made a couple posts about when he and I were carving Halloween pumpkins and then sorting through our kids Halloween candy.  I really need to find a way to archive those.

yeah.  some kind soul needs to collect all the robio - miyamoto posts and put them in the hall of fame for all to behold and marvel at forevermore

Stop staring at me! I am not doing it! 

phantom_leo said:

Iga_Bobovic said:

Stop staring at me! I am not doing it!

I wasn't staring at you for THAT reason!

Oh. Wait. You weren't talking to me, were you?

*Goes back to staring, wondering: Is that a Kunai in Iga's Gi...? Or is he just happy to see me?*

Please check out my Rafa Nadal like huge butt

*giggles

bugsonglass said:

yeah.  some kind soul needs to collect all the robio - miyamoto posts and put them in the hall of fame for all to behold and marvel at forevermore

I'm starting a thread in the game forums where I'm collecting all of these.  I've got the two most recent there, and now I'm trying to remember the time before that when we last hung out. I know around the beginning of October we went to play some skee ball at Chuck E Cheese, but I can't remember if I wrote about that or not.

ASK_Story said:

gamingeek said:

Rabbids Go Home Reviews

• Nintendo World Report    9/10
• Giant Bomb                      4/5
• Gamepro                          4/5
• NGamer                            86%
• IGN                                   8.5
• Official Nintendo Mag      83%
• Gamesradar                      8/10
• Eurogamer                       8/10
• Nintendo Life                   8/10
• 1up                                  B
• Game Informer                7.5

Kotaku, no rating but  good review:

"It's another strong Wii game from a non-Nintendo company, adding to what's become an eclectic shelf of small 2009 Wii gems"

I'd like to check out this new Rabbids game one day. Looks fun.

I'm such a bigot when it comes to the Rabbid games.  I just won't buy it -- ever.  Give me another BGE Ancel, then I'll consider it, but it's just not my speed.

aspro said:

^They are out of your league man (that's a compliment).

are they using mysql over there? Can you tell?

Nothing with the vulnerabilities posted has to do with the database, but I don't have a definitive way to tell either way.  The site is in PHP, so the odds are heavily in favour of it, but PostgreSQL is still a reasonable possibility, and MSSQL far less likely but still technically possible.

I like Backloggery because it's simple.  Honestly, it's very much like something I would do, and was similar to what I considered as an option with the design of this site, but didn't really like the ugliness that would result on the database side, and felt we're better off not acting as a database.

In case you're wondering though, I'm not going out of my way to break the site, but once an idea pops into my mind, I can't help but follow through and see what happens.  And knowing it's there I send it along.  I'll post the full details in a blog post in a week so they have time to read and address it.

EDIT: Oh, and thanks for the compliment on that, but this type of thing isn't exactly high-end, moreso just due diligence.  I think it's just an oversight, but again I'll address it in a blog more specifically.

Dvader said:

Yodariquo said:

Hey guys, I've been able to compromise Backloggery with a cross-site scripting vulnerability.  The script I wrote for automating game submissions tipped me off.  It's just proof of concept that users can insert arbitrary JavaScript, you can see the example here.  It shows an alert with the user's cookie data.

The site is also vulnerable to cross-site request forgeries, which just the fact that I can run a script to submit games is proof itself.  I've passed along the information through the contact form (I also previously sent along a report of an issue with the reset password form) so hopefully it will get fixed.

In english please.

I could do the 1up hack if I wanted.