NoSurvivors is using CC Clickjacking weakness [ka]

[GoranZ]

Accused:
NoSurvivors

The accused are suspected of: Severe PM Abuse
His message:
DO NOT CLICK ON THE LINK!!!

I would like to invite you to join the Campaign NoSs campaign!.

Click (DO NOT CLICK)here to check it out.

Problematic link is following: http://www.conquerclub.com/player.php?[ ... Tournament[/b]&tournament_id=2685
The part: "submit=JoinTournament" has a task for joining a tournament, but I have no idea which tournament, what it has, absolutely nothing.
To make it more problematic he says "Click here to check it out", so I expect some tournament page to open, not to join a tournament.
The tournament has entry requirement of 200 Conquer Credits, so can be considered also as Conquer Credits farming.

Comments:
What is Clickjacking can be found on appropriate Wikipedia page: http://en.wikipedia.org/wiki/Clickjacking

[Gilligan]

wait, what are campaigns? this is essentially betting on games (because there are only two players in the game) which I thought was strictly prohibited?

Gambling on or through this site is not allowed.
HIDE: GAMBLING SPECIFICS
This is a casual gaming site, not a serious one. If you want to bet money or "real-world items", then you'll have to find another site.
Wagering CC points is also not allowed.
The Conquer Cup is of course not considered gambling just because there is an entry fee associated with participation!

https://www.conquerclub.com/forum/viewt ... 5#p1759438

[Dukasaur]

@Goran: While NS's link is in poor taste, you do have an option to cancel after you click, so I'm not sure if it can be called true clickjacking.

@Gilligan: Yeah, it's gambling. Potentially a problem, but there's been a constituency that wants it, so they got it.

[Gilligan]

@Goran: While NS's link is in poor taste, you do have an option to cancel after you click, so I'm not sure if it can be called true clickjacking.

@Gilligan: Yeah, it's gambling. Potentially a problem, but there's been a constituency that wants it, so they got it.

with only two players in the campaign, wouldn't it immediately start?

[DoomYoshi]

I think those are not NoS clickjacking, but a feature of the site. One which perhaps can be changed. This belongs in Bugs or Suggs (Which really should be the same forum); not C&A.

We have just tested for a 2-player campaign. It auto-joins, but still allows a cancel.

[GoranZ]

@Goran: While NS's link is in poor taste, you do have an option to cancel after you click, so I'm not sure if it can be called true clickjacking.

its true clickjacking 100% genuine one.

I think those are not NoS clickjacking, but a feature of the site.

Weakness presented as a feature Thats a good one, made me lough.

@Goran: While NS's link is in poor taste, you do have an option to cancel after you click, so I'm not sure if it can be called true clickjacking.

@Gilligan: Yeah, it's gambling. Potentially a problem, but there's been a constituency that wants it, so they got it.

with only two players in the campaign, wouldn't it immediately start?

One which perhaps can be changed. This belongs in Bugs or Suggs (Which really should be the same forum); not C&A.

We have just tested for a 2-player campaign. It auto-joins, but still allows a cancel.

There is Cancel because the campaign requires Conquer Credits, but if it doesn't require Conquer Credits...

[DoomYoshi]

Even when doing a no credit campaign, there is still a button which says, please confirm you would like to join this campaign. I don't see the issue here, although the wording could be better for sure.

[Razorvich]

I clicked the link when it was sent to me, and once i found out the settings were freestyle, i hit cancel.

There was an option to confirm whether you really wanted in or not.

It was not a link that automaticly put me into a game, I had the option to abort...which i did cause I suck at freestyle games

[king achilles]

I clicked the link when it was sent to me, and once i found out the settings were freestyle, i hit cancel.

There was an option to confirm whether you really wanted in or not.

It was not a link that automaticly put me into a game, I had the option to abort...which i did cause I suck at freestyle games

This.

[Gilligan]

he should still be warned, or at least noted. he can just as easily link to the tournament without the join popup happening. that is what SHOULD be done.

[DoomYoshi]

he should still be warned, or at least noted. he can just as easily link to the tournament without the join popup happening. that is what SHOULD be done.

He didn't send the PM. The site did. It's stupid that it says from "user" without it ever going into the user's outbox, but that's how it works.

[KraphtOne]

he should still be warned, or at least noted. he can just as easily link to the tournament without the join popup happening. that is what SHOULD be done.

He didn't send the PM. The site did. It's stupid that it says from "user" without it ever going into the user's outbox, but that's how it works.

yuuuuup. more nonsense

[NoSurvivors]

Eek.. I didn't realize it was an auto join link. I simply sent a bunch of people the link to the "details" page. I guess it must be a glitch. Don't want anyone joining that doesn't want to, it's just hard to find people who like FS so I sent it to a bunch of players.

[Gilligan]

he should still be warned, or at least noted. he can just as easily link to the tournament without the join popup happening. that is what SHOULD be done.

He didn't send the PM. The site did. It's stupid that it says from "user" without it ever going into the user's outbox, but that's how it works.

okay, then obviously NoS doesn't have any malicious intent here. this should still be changed, in the automated PM.