+- Discovery Gaming Community (https://discoverygc.com/forums)
+-- Forum: The Community (https://discoverygc.com/forums/forumdisplay.php?fid=4)
+--- Forum: Real Life Discussion (https://discoverygc.com/forums/forumdisplay.php?fid=16)
+--- Thread: fake site used to get peoples passwords? (/showthread.php?tid=95482)
RE: fake site used to get peoples passwords? - Error - 03-13-2013
(03-13-2013, 04:50 AM)Zachary.Corfu Wrote: Hey, notice that it has a different picture icon than the usual white "V". Instead, it's a blue little globe.It'll change for you on the .com domain as well eventually. That's just caching at work - the favicon/"picture icon" was changed a few days ago.
@ProwlerPC: The reason why you're not automagically logged in on both sites is due to cookies working on a per-domain basis, so the cookie that stores your login key and user ID on the .com domain won't automagically log you in on the .org domain, even if both domains are pointing to the same web server. The web server/MyBB doesn't seem to be aware of the .org domain at all, so it doesn't recognize you when you attempt to connect from the .org domain - it doesn't store a login cookie for the .org domain at all, just for the .com one, as far as I can see, so it's impossible to actually use the .org one for browsing the forums as you normally would.
It really only works as a somewhat broken redirect site, which you can see by clicking almost any link - it'll take you right back to the .com domain.
I wonder why Cannon didn't set it up as an URL redirect to the .com domain instead - probably just an oversight.
RE: fake site used to get peoples passwords? - Corigan - 03-13-2013
(03-13-2013, 08:47 AM)Error Wrote:(03-13-2013, 04:50 AM)Zachary.Corfu Wrote: Hey, notice that it has a different picture icon than the usual white "V". Instead, it's a blue little globe.It'll change for you on the .com domain as well eventually. That's just caching at work - the favicon/"picture icon" was changed a few days ago.
@ProwlerPC: The reason why you're not automagically logged in on both sites is due to cookies working on a per-domain basis, so the cookie that stores your login key and user ID on the .com domain won't automagically log you in on the .org domain, even if both domains are pointing to the same web server. The web server/MyBB doesn't seem to be aware of the .org domain at all, so it doesn't recognize you when you attempt to connect from the .org domain - it doesn't store a login cookie for the .org domain at all, just for the .com one, as far as I can see, so it's impossible to actually use the .org one for browsing the forums as you normally would.
It really only works as a somewhat broken redirect site, which you can see by clicking almost any link - it'll take you right back to the .com domain.
I wonder why Cannon didn't set it up as an URL redirect to the .com domain instead - probably just an oversight.
Hmm I was talking about I actually loged into that domain and yet it just set me back to the homepage not loged in. thought something fishy was going on.
RE: fake site used to get peoples passwords? - ProwlerPC - 03-14-2013
Yes, Corrigan, that's precisely how it turns out. It's ok though, your password is still secure, even we admins don't know it (and shoudn't ever have to ask for it so don't tell anyone it)
RE: fake site used to get peoples passwords? - Corigan - 03-14-2013
(03-14-2013, 01:07 AM)ProwlerPC Wrote: Yes, Corrigan, that's precisely how it turns out. It's ok though, your password is still secure, even we admins don't know it (and shoudn't ever have to ask for it so don't tell anyone it)
I'm well trained in the art of not falling for scams
RE: fake site used to get peoples passwords? - Veygaar - 03-14-2013
Am I the only one who thinks ProwlerPC is hacked?
RE: fake site used to get peoples passwords? - Marburg - 03-14-2013
(03-14-2013, 03:46 AM)Veygaar Wrote: Am I the only one who thinks ProwlerPC is hacked?
(03-13-2013, 04:41 AM)Marburg Wrote: how do we know you're not a pod person from the other site posing as Prowler?Yes?
RE: fake site used to get peoples passwords? - SMGSterlin - 03-14-2013
(03-14-2013, 03:33 AM)Corigan Wrote: I'm well trained in the art of not falling for scamsSays the guy who logged onto a site he thought was for phishing. :3
(03-14-2013, 03:46 AM)Veygaar Wrote: Am I the only one who thinks ProwlerPC is hacked?Karlotta made that fake domain in order to steal people's accounts, so that he/she (it?) could better hide and not have to use obvious new accounts.
Thus, Prowler is Karlotta.
RE: fake site used to get peoples passwords? - SparkyRailgun - 03-14-2013
It bothers me that my infrequent visits to the forums always end up with me reading posts by sterlin.
RE: fake site used to get peoples passwords? - Valhalla Sr. - 03-14-2013
To Flood!
RE: fake site used to get peoples passwords? - SMGSterlin - 03-15-2013
(03-14-2013, 05:13 PM)Railgun! Wrote: It bothers me that my infrequent visits to the forums always end up with me reading posts by sterlin.You Bob?