SitePoint Sponsor

User Tag List

Results 1 to 16 of 16
  1. #1
    SitePoint Evangelist lance_vincent's Avatar
    Join Date
    Aug 2004
    Location
    philippines
    Posts
    574
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Add to your contacts

    Hi guys!

    familiar with modern networking websites, that has this feature that says "send invites to your contacts", then for example you choose Yahoo, then you will need to supply in your login details, then on the next page, walllaaa.. all your yahoo contacts are listed.. how can this be done?

    Any form of help will do..

    thanks!
    If you won't dress like the
    Victoria Secret girls,
    don't expect us to act like soap opera guys.

  2. #2
    SQL Consultant gold trophysilver trophybronze trophy
    r937's Avatar
    Join Date
    Jul 2002
    Location
    Toronto, Canada
    Posts
    39,323
    Mentioned
    63 Post(s)
    Tagged
    3 Thread(s)
    do you actually give your yahoo password to some 3rd party website?

    whoa!
    rudy.ca | @rudydotca
    Buy my SitePoint book: Simply SQL
    "giving out my real stuffs"

  3. #3
    SitePoint Evangelist lance_vincent's Avatar
    Join Date
    Aug 2004
    Location
    philippines
    Posts
    574
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Talking

    its not that im giving it, but like friendster.com, you choose from msn, yahoo, gmail, etc, then they will list all your contacts and have them send some invites. I am curious as a programmer, and im puzzled how this is done. of course i have a separate email for spamming purposes and for my real personal one hehehe..

    anyone who knows how this is done?
    If you won't dress like the
    Victoria Secret girls,
    don't expect us to act like soap opera guys.

  4. #4
    SitePoint Wizard cranial-bore's Avatar
    Join Date
    Jan 2002
    Location
    Australia
    Posts
    2,634
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    I remember reading something a while ago (probably at Ajaxian.com) about a security hole in some of the Gmail Javascript that would allow another site to access your contact list (using their own JS).

    I think this might be the article: http://ajaxian.com/archives/gmail-csrf-security-flaw

    Might be something similar here, although it seems odd that many service providers would have the same security hole!

  5. #5
    SitePoint Wizard wheeler's Avatar
    Join Date
    Mar 2006
    Location
    Gold Coast, Australia
    Posts
    1,369
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    sorry to post another comment that does not help the initial cause, but what is to stop the site from using the password input and storing it for themselves?
    Studiotime - Time Management for Web Developers
    to-do's, messages, invoicing, reporting - 30 day free trial!
    Thomas Multimedia Web Development

  6. #6
    reads the ********* Crier silver trophybronze trophy longneck's Avatar
    Join Date
    Feb 2004
    Location
    Tampa, FL (US)
    Posts
    9,854
    Mentioned
    1 Post(s)
    Tagged
    0 Thread(s)
    probably nothing. but i don't think this thread is going to move anywhere until someone with a friendster account tries the feature and reports back. i can tell you that won't be me.

  7. #7
    SitePoint Evangelist lance_vincent's Avatar
    Join Date
    Aug 2004
    Location
    philippines
    Posts
    574
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Quote Originally Posted by longneck View Post
    probably nothing. but i don't think this thread is going to move anywhere until someone with a friendster account tries the feature and reports back. i can tell you that won't be me.
    actually, if i remember correctly, friendster.com was the 3rd time i encountered this feature..just yesterday i did again on a local alumni site for our place..and i find it convieniet instead of the textarea where it says "place emails here separated by commas"...
    If you won't dress like the
    Victoria Secret girls,
    don't expect us to act like soap opera guys.

  8. #8
    reads the ********* Crier silver trophybronze trophy longneck's Avatar
    Join Date
    Feb 2004
    Location
    Tampa, FL (US)
    Posts
    9,854
    Mentioned
    1 Post(s)
    Tagged
    0 Thread(s)
    and you're sure you never gave the site your email password?

  9. #9
    . shoooo... silver trophy logic_earth's Avatar
    Join Date
    Oct 2005
    Location
    CA
    Posts
    9,013
    Mentioned
    8 Post(s)
    Tagged
    0 Thread(s)
    They probably login into your account and scrape the content and parse it. Or they use an API again using your account name and password.

    Now this is a stupid thing to do I would never trust anything like this. Not to mention its being sent over a none encrypted connection.

    Bad Very Bad
    Logic without the fatal effects.
    All code snippets are licensed under WTFPL.


  10. #10
    SitePoint Evangelist lance_vincent's Avatar
    Join Date
    Aug 2004
    Location
    philippines
    Posts
    574
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    yes.. very similar to what logic_earth displayed in his post. i am just curious as a programmer, nothing else. Its better to at least say i can do this trick than not know it cause majority thinks its bad..thats what i think.

    if this is an API, then i can create im my localhost pc a page that will extract my recent emails, cool...
    If you won't dress like the
    Victoria Secret girls,
    don't expect us to act like soap opera guys.

  11. #11
    SQL Consultant gold trophysilver trophybronze trophy
    r937's Avatar
    Join Date
    Jul 2002
    Location
    Toronto, Canada
    Posts
    39,323
    Mentioned
    63 Post(s)
    Tagged
    3 Thread(s)
    you know, this is a very weird coincidence, but just today i receives an invite for a new site, http://spock.com/

    they offer the same service -- you give them your passwords, they retrieve your contacts from various sites, like yahoo, hotmail, gmail, etc.

    i cannot get over how naïve they think the average user is...
    rudy.ca | @rudydotca
    Buy my SitePoint book: Simply SQL
    "giving out my real stuffs"

  12. #12
    SitePoint Evangelist lance_vincent's Avatar
    Join Date
    Aug 2004
    Location
    philippines
    Posts
    574
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    lets just say there are some persons like me out there.. when i was a teen, i create an email account just for the experience of having one..i pretty much signup for everything that interest me. and i dont mind giving my passwords to my classmates either. but since now im working for the IT world, i have a more personal email for these purposes.
    If you won't dress like the
    Victoria Secret girls,
    don't expect us to act like soap opera guys.

  13. #13
    SitePoint Wizard wheeler's Avatar
    Join Date
    Mar 2006
    Location
    Gold Coast, Australia
    Posts
    1,369
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    its all fun and games until someone deletes all your messages, spams your contact list, and... does other bad things... my mates would've been mad sharing each others passwords, would've been asking for trouble amongst mates... let alone strangers.
    Studiotime - Time Management for Web Developers
    to-do's, messages, invoicing, reporting - 30 day free trial!
    Thomas Multimedia Web Development

  14. #14
    . shoooo... silver trophy logic_earth's Avatar
    Join Date
    Oct 2005
    Location
    CA
    Posts
    9,013
    Mentioned
    8 Post(s)
    Tagged
    0 Thread(s)
    http://developer.yahoo.com/ Might want to take a look see here.
    Logic without the fatal effects.
    All code snippets are licensed under WTFPL.


  15. #15
    SitePoint Wizard wheeler's Avatar
    Join Date
    Mar 2006
    Location
    Gold Coast, Australia
    Posts
    1,369
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    If this script is anything to go by, it looks like you have to create a bot of sorts and login to each email client, which inevitably will stop working sooner or later when the email provider changes something.

    http://www.sourcerally.net/Scripts/3...tmail-adresses
    Studiotime - Time Management for Web Developers
    to-do's, messages, invoicing, reporting - 30 day free trial!
    Thomas Multimedia Web Development

  16. #16
    SitePoint Evangelist lance_vincent's Avatar
    Join Date
    Aug 2004
    Location
    philippines
    Posts
    574
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    thanks for the link!
    If you won't dress like the
    Victoria Secret girls,
    don't expect us to act like soap opera guys.


Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •