Sun 20 May 2007 01:08:34 PM UTC, original submission:
SUMMARY:
By editing two articles in parallel in two different panels in a certain way, a user can edit as many wikified articles as s/he wishes under the identities of those other users (either guest or member).
COMMENT:
For obvious reasons, this could make people REALLY upset with samizdat. Since we have no guarantee that people will update properly (quickly) after the bug is fixed, i'm setting this as private in savannah.
VERSION:
0.6.0.20070609-1
DESCRIPTION
1. guest publishes message 3105 open for editing
2. guest publishes message 3106 open for editing
3. user logs in
4. in browser panel A, user starts editing 3105, hits preview (does
not yet hit confirm)
5. in browser panel B, user edits 3106, previews, confirms
6. result: 3106 has been successfully edited, but the author of the
modified version is guest, not user
7. in panel A, user confirms.
8. result: confirm is accepted without error, but user's modifications
to 3105 are ignored and there is no history link on 3105.
9. user can now repeatedly edit article 3105 in panel A and article 3106
in panel B. all the edits are recorded as author=guest
10. user chooses another openly editable article written by user_2
from the frontpage (previously loaded in panel Z), successfully
edits, previews, confirms. The history credits the change
to user_2, not to user.
11. user is now authorised to have an incredible amount of fun under other people's electronic identities and sabotage the whole informal web of trust that exists between users.
|