29 Apr '15, 8am

Race Conditions Exploit Granted Free Money on Web Services

Race Conditions Exploit Granted Free Money on Web Services

[Josip] has been playing around with race conditions on web interfaces lately, finding vulnerabilities on both Facebook and Digital Ocean. A race condition can occur when a piece of software processes multiple threads using a shared resource. For example, [Josip] discovered that he was able to manipulate page reviews using just a single Facebook account. Normally, a user is permitted to leave just one review for any given Facebook page. This prevents a single user from being able to skew the page’s overall ranking by making a bunch of positive or negative reviews. The trick to manipulating the system was to intercept the HTTP request that submitted the page review. The request was then replayed over and over in a very short amount of time. Facebook’s servers ended up processing some of these requests simultaneously, essentially unaware that multiple requests had come in so...

Full article: http://hackaday.com/2015/04/29/race-conditions-exploit-gr...

Tweets

Young, cool & free, The Women’s Nike Free Virit...

footlocker.eu 02 May '15, 3pm

਍ℼ佄呃偙⁅瑨汭ാ㰊瑨汭砠汭獮∽瑨灴⼺眯睷眮⸳牯⽧㤱㤹砯瑨汭㸢਍格慥⁤摩∽瑣ぬ弰效摡∱㰾楴汴㹥਍瘉物瑩畯⁳‭潆瑯䰠捯敫൲㰊琯瑩敬㰾敭慴椠㵤挢汴〰浟瑥䑡獥≣渠浡㵥搢獥牣灩楴湯•潣瑮湥㵴瘢物瑩畯≳⼠㰾敭慴椠㵤挢汴〰浟瑥䭡祥•慮敭∽敫睹牯獤•潣瑮湥㵴...

Dot Free

cheeserland.com 30 Apr '15, 2am

April 18, 2015 in Commercial Break Today i’m introducing another skincare product series from Japan! You may have seen the...

Need a #bitcoin #donation button web page made?

Need a #bitcoin #donation button web page made?

bitcoinrush.co.nf 10 May '15, 4pm

Click or scan the image above or send bitcoin to this bitcoin address 1MRE5MqKLiizevgjKa2ejZjZKFYnuVu1jF

This first-time marathoner won the race by a mile—literally!

This first-time marathoner won the race by a mi...

runnersworld.com 29 Apr '15, 5pm

The next time Samantha Bluske, 23, gets asked, "How long was that marathon?' she can legitimately answer something differe...

Become A Game Tester - Start Making Money Playi...

becomeagametester.com 29 Apr '15, 4pm

Create the perfect resume . There are a FEW MAJOR requirements that game companies look for in every application yet all a...

What SEOs Want From a Web Grader

What SEOs Want From a Web Grader

searchenginewatch.com 28 Apr '15, 11am

Marketers can find thousands of blogs and articles with advice about best practices for a call to action — what works best...

Dot Free

cheeserland.com 02 May '15, 7pm

April 18, 2015 in Commercial Break Today i’m introducing another skincare product series from Japan! You may have seen the...

The 4xMile showed how crazy running can be. Why that race was so awesome

The 4xMile showed how crazy running can be. Why...

flotrack.org 28 Apr '15, 5pm

Why the 4xMile jog-fest is good for the sport This article usually recaps all the top performances from the weekend in a n...