Hi !
Featured games (90)
games approved by the League of Dukes
Games in Showcase (754)
Games in Android Showcase (229)
games submitted by our members
Games in WIP (842)
games currently in development
News: Read the Java Gaming Resources, or peek at the official Java tutorials
    Home     Help   Search   Login   Register   
Pages: [1]
  ignore  |  Print  
  I think there's some XSS injections on JGO  (Read 3235 times)
0 Members and 1 Guest are viewing this topic.
Offline Xemdo

Senior Newbie

Medals: 1
Exp: 2 years

« Posted 2014-07-04 20:58:14 »

This happens every time I load a page on this site:

Along with that there is a weird Russian site that also pops up in TCPView when I go to this site:

Although that might be something regarding the ad pictures or the latest projects, but I have no idea how those work.

My assumptions that it's JavaScript come from the fact that this only happens on and no other sites and that Malwarebytes said the connection was outbound.
Offline Riven

« JGO Overlord »

Medals: 1340
Projects: 4
Exp: 16 years

Hand over your head.

« Reply #1 - Posted 2014-07-05 09:17:56 »

Well, it's to be expected the connection is outbound: it's the browser downloading an image -  to be exact: this image:

from this thread - displayed in the sidebar:

You get a notification because somebody might be (or was, at some point in time) hosting malware on that domain - which is to be expected on a site that allows uploading arbitrary content.

That doesn't mean loading a image from said domain is unsafe.

Hi, appreciate more people! Σ ♥ = ¾
Learn how to award medals... and work your way up the social rankings!
Online princec

« JGO Spiffy Duke »

Medals: 1030
Projects: 3
Exp: 20 years

Eh? Who? What? ... Me?

« Reply #2 - Posted 2014-07-05 09:25:40 »

Once again so called "anti-malware" ends up causing scares, paranoia, false positives, and generally being useless and more harm than good  Emo

Seriously.... everyone. Just stick to MSSE.

Cas Smiley

Games published by our own members! Check 'em out!
Legends of Yore - The Casual Retro Roguelike
Offline PandaMoniumHUN

JGO Coder

Medals: 32
Exp: 3 years

White-bearded OGL wizard

« Reply #3 - Posted 2014-07-05 10:31:41 »

Seriously.... everyone. Just stick to MSSE.
Back then, when I was working for a game server/vpn hosting company we did multiple tests out of curiosity to compare anti-virus softwares and MSSE is one of the worst.
Seriously, it didn't detect half of the harmful stuff we threw at it. It was okay-ish once, but not anymore.
I've been using Avast on my PC for a few months now and it seems to get the job done, although it's not the most robust AV out there either but in exchange it's free and it's out of the way with relatively low CPU/memory usage. Smiley

My Blog | Jumpbutton Studio - INOP Programmer
Can't stress enough: Don't start game development until you haven't got the basics of programming down! Pointing
Online princec

« JGO Spiffy Duke »

Medals: 1030
Projects: 3
Exp: 20 years

Eh? Who? What? ... Me?

« Reply #4 - Posted 2014-07-05 10:53:48 »

IMHO it still is. False positives remain the biggest threat to usability after the main problem of grinding your machine to a halt, and MSSE does very well when you look at those two factors.

Cas Smiley

Offline ra4king

JGO Kernel

Medals: 508
Projects: 3
Exp: 5 years

I'm the King!

« Reply #5 - Posted 2014-07-20 13:05:02 »

I used to advocate for MSSE, but after the recent poor ratings, I switched to Avast, set up daily quick scan and weekly full scans, and set it to silent. I've never had any false positives and have had no issues with it.

Offline Slyth2727
« Reply #6 - Posted 2014-07-20 16:45:57 »

I just uninstalled avast for malwarebytes. Even when I set Avast to silent mode or whatever it still annoyed the shit out of me, being completely anal whenever I went to a lot of websites. Simply doing research was getting impossible because the thing was blocking everything.
This is why I use Arch  Roll Eyes
Pages: [1]
  ignore  |  Print  

DesertCoockie (22 views)
2018-05-13 18:23:11

nelsongames (74 views)
2018-04-24 18:15:36

nelsongames (68 views)
2018-04-24 18:14:32

ivj94 (751 views)
2018-03-24 14:47:39

ivj94 (81 views)
2018-03-24 14:46:31

ivj94 (605 views)
2018-03-24 14:43:53

Solater (97 views)
2018-03-17 05:04:08

nelsongames (178 views)
2018-03-05 17:56:34

Gornova (388 views)
2018-03-02 22:15:33

buddyBro (1048 views)
2018-02-28 16:59:18
Java Gaming Resources
by philfrei
2017-12-05 19:38:37

Java Gaming Resources
by philfrei
2017-12-05 19:37:39

Java Gaming Resources
by philfrei
2017-12-05 19:36:10

Java Gaming Resources
by philfrei
2017-12-05 19:33:10

List of Learning Resources
by elect
2017-03-13 14:05:44

List of Learning Resources
by elect
2017-03-13 14:04:45

SF/X Libraries
by philfrei
2017-03-02 08:45:19

SF/X Libraries
by philfrei
2017-03-02 08:44:05 is not responsible for the content posted by its members, including references to external websites, and other references that may or may not have a relation with our primarily gaming and game production oriented community. inquiries and complaints can be sent via email to the info‑account of the company managing the website of java‑
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines | Managed by Enhanced Four Valid XHTML 1.0! Valid CSS!