Tell HN: You can spam every user of the frid.ge(YC S10)

Posted by skbohra123 on Thursday October 07, 2010 @07:20AM
from the self-post dept.

The frid.ge uses a url like http://www.frid.ge/php/profile.php?u=10613 for user profile, while there is no provision of a search box in site, you can easily find a profile by changing u=xxxx to get a profile. And you can post on their wall to , regardless of the privacy settings. Don't know if it's a bug or a feature but I found it weird.

( 7 comments | 5 points | on HN )

Re:Tell HN: You can spam every user of the frid.ge(YC S10) by jessor on Thursday October 07, 2010 @08:14AM (#1767555)

Did you talk to the owners first? Just seems weird to post it here instead of just talking to them (first). Not everyone is as bad as facebook ;-)

[ Parent | on HN ]

Re:Tell HN: You can spam every user of the frid.ge(YC S10) by skbohra123 on Thursday October 07, 2010 @08:16AM (#1767563)

lemme write to them as well.

[ Parent | on HN ]

Re:Tell HN: You can spam every user of the frid.ge(YC S10) by austinchang on Thursday October 07, 2010 @05:59PM (#1769703)

actually it wasn't ever broken. while we are revamping our architecture the urls/params are exposed however you can only see profiles of people who are in your group (which you can do on the site directly by clicking on their names)

We restrict all access and indexing of groups to only group members. While bots or curious folks can systematically change uid numbers they won't be able to access anything in a group unless they are already members...

not a privacy bug but exposed uids which we are soon fixing

[ Parent | on HN ]

Re:Tell HN: You can spam every user of the frid.ge(YC S10) by scompt on Thursday October 07, 2010 @08:14AM (#1767553)

Did it occur to you there might be a better venue to report this?

[ Parent | on HN ]

Re:Tell HN: You can spam every user of the frid.ge(YC S10) by grep on Thursday October 07, 2010 @12:49PM (#1768428)

What's the point of using frid.ge when you have fb groups?

[ Parent | on HN ]

Re:Tell HN: You can spam every user of the frid.ge(YC S10) by CyrilMazur on Thursday October 07, 2010 @07:59AM (#1767529)

wow, has just been fixed

[ Parent | on HN ]

Re:Tell HN: You can spam every user of the frid.ge(YC S10) by skbohra123 on Thursday October 07, 2010 @08:14AM (#1767554)

fixed?

[ Parent | on HN ]