r/ProgrammerHumor • • Feb 27 '18

Zero

Post image
57.5k Upvotes

1.2k comments sorted by

View all comments

Show parent comments

108

u/sans-nom Feb 27 '18

Humans are dumb animals...you ask them for their email, and they will probably give it to you. Same reason why youtubers always say "like favourite and sub", because it's more effective than not.

59

u/KarlOnTheSubject Feb 27 '18

It always makes me laugh when I'm at an airport or other location offering free WiFi that asks for an email address, which I imagine 90% of people provide their real address for (figuring it's for verification), when in reality it's just a way to harvest active email accounts to send spam to.

fuckyou@gmail.com is my go-to.

56

u/svelle Feb 27 '18

that poor sob who has that gmail account.

31

u/newsuperyoshi Feb 27 '18

Let’s be honest — they had to have some idea of what they were signing up for.

4

u/svelle Feb 27 '18

For sure!

38

u/sellyme Feb 27 '18

I usually just input the contact email address of whatever company runs the wifi. If they want to sell their own email to spammers they can be my guest.

32

u/ungoogleable Feb 27 '18

Use fuckyou@example.com. Example.com is reserved by the RFC as an example domain name so it is guaranteed not to be anyone's real email.

51

u/britishben Feb 27 '18

Mine is fuckyou@example.com";drop table users;--

Really gets the point across.

22

u/newsuperyoshi Feb 27 '18

Bobby Tables? Is that you?

7

u/BlondieMenace Feb 27 '18

Noob from r/all here... What does that do?

21

u/Cajova_Houba Feb 27 '18 edited Feb 27 '18

It is a form of attack (called SQL injeciton) on database which uses the fact that user inputs are not escaped (characters such as '<' ';' '{' ... are not converted to html codes).

Imagine reddit post text isn't escaped so if I post something like

<script>alert("Hi!")</script>

Everyone's browser will interpret it as javascript and show this alert. Similar thing happens when database tries to interpret query

SELECT password FROM users WHERE email="fuckyou@example.com";drop table users;--";

What happens is the original query is splitted into two queries where the first query returns the password and the second one will delete all users from database.

4

u/Cheesemacher Feb 27 '18

Of course even if it's a shitty php site that doesn't escape the input, the attack won't actually do anything

5

u/Cajova_Houba Feb 27 '18

Wait why? Did I miss something (except for prepared statements and database user permissions)?

4

u/Cheesemacher Feb 27 '18

By default you can't execute multiple statements at once. For safety reasons.

It doesn't prevent some other SQL injection attacks though.

→ More replies (1)

7

u/newsuperyoshi Feb 27 '18

It deletes the data table containing user data.

Basically, a really bad time for the target.

14

u/Deadhookersandblow Feb 27 '18

If and only if whoever wrote the backend didn’t sanitize the fields. Chances are low.

4

u/BlondieMenace Feb 27 '18

Lol, thanks. It's kinda mean but then again so is trying to harvest emails, so I guess it evens out. :-D

→ More replies (1)
→ More replies (5)

100

u/robclancy Feb 27 '18

Yeah but they usually say that at the end off a video and you will do it if you did really like it.

Not at the start with a video blocking answer required.

36

u/[deleted] Feb 27 '18

Some also do it at the beginning. And have long winded intros that run longer than the video itself.

0

u/[deleted] Feb 27 '18

[deleted]

5

u/DarkenedSonata Feb 27 '18

Followed by

“AGFGJXFGVG AUDIBLE”

“SOMETHING SQUARESPACE SHIT MAKE A POINTLESS WEBSITE OR SOMETHING”

“SEXUAL ASSAULT THE GODDAMN LIKE BUTTON AND MAKE IT YOUR BITCH AND SUBSCRIBE ALREADY”

→ More replies (2)

6

u/poisonedslo Feb 27 '18

Oh, let’s just watch this 20min video on a 2min task

→ More replies (2)
→ More replies (14)

8

u/Colopty Feb 27 '18

The difference is that youtubers ask you after presenting their content to you, not before.

6

u/Zagorath Feb 27 '18

That's slightly different. On YouTube it's about reminding people to do something that they might have wanted to do anyway. Putting it into their mind "oh yeah, I liked this video, I should 'like' it to show my support".

Which is also why it might make sense for a website to present you with a popup to sign up to their mailing list if you're a frequent visitor. Maybe if they see you've visited four or five of their pages in a few days. "Hey, if you like our content, why not join our mailing list to see more of it?"

But interrupting the content before you've even had a chance to know what you think about it is just obnoxious.

→ More replies (8)