Tell us your naughty stories

during first two weeks, I've found two small communities (one was for writers and second one for designers), and found JS-injection vulnerability on both. On the first one i decided to stay anonymous, and whenever admin displayed info (after the fix), all the people in community started calling that "anonymous" words and saying that i've got nothing to do except for looking how to find these things in someone else's nice and quiet website.

another (third) website was for keyboard-addicts. they were competing on who types faster. i wrote a little script, and got my typing speed up to 14K symbols per minute, they asked me to confirm it though the capture image, I confirmed it to some point using first several words from capture and Google. well, all the people hated me again, since they wanted it to be a "pure competition". even though my intention was to find and report (i was also giving precise explanations on how to fix these things), people still considered me evil.

BTW, if you're still using jevix on python systems, you'll be hacked by someone soon, since they allow scirpt tag injection inside of [img]. so be careful, escape strings and treat people who're finding vulnerabilities as _people_ not like they've-got-nothing-else-to-do dogs)

Every hour we'd have someone come over and check the little counter on our screens to make sure we were doing at least 12 per hour.

So I screenshotted the software, took it into MS-Paint and edited the counter to read 12, and every time they came around I'd just alt-tab to the screenshot and they were never the wiser.

Some years ago, my friend and I decided to kick off the night by drinking some beer in a park, downtown Montreal. After a few minutes, it started raining like hell. We had to get inside somewhere and the closest place was a university building which was "fortunately" still opened. We went inside and walked by the security, each carefully dissimulating our beer through our jacket. After wandering some time through the hallways, we finally found an unlocked classroom to finish our booze. Once done, we slowly walked back to the main entrance. We would soon realize that time had flied by and the building was long closed.

Fortunately there was still a security guy. We kindly asked him if he could unlock the door for us. Of course, we looked somewhat drunk and he asked us, on an authoritative tone, what we were doing here. My friend came up with the lamest lie. The guy wasn't stupid and obviously knew we were hiding something. By that time, another security guy had came by. "I have to get us out of the shit", I thought to myself. I took all my courage and asked: "Ok, so you won't let us out just because we are gay?". The guy became visibly panicked, probably frightened to lose his job over homophobia. He almost apologized and quickly let us out. I was really proud of social engineering our way out of this delicate situation. My friend wasn't, he started yelling incoherently at me. I told him to get over it: "Who cares if he thinks you're gay? You're never going to see him again". I was wrong. Remember the second security guy who was standing there all along? It happened to be a friend of his very catholic father.