mustard is the hero UGC forums deserve, but not the one anyone wants or needs ever

Given the amount of users that conform the ugc player base, storing the passwords in plain text is pretty unacceptable. But it's also so easy to complain about stuff forgetting that ugc is a free league that's run by volunteers. Good on mustard and co for noticing the problem early on, and good that this recent event will get this issue fixed asap.

can Lennon be banned from tf.tv tho? that's fucking disgusting and retarded

i get that what lennon did was fucked up, but it seems pretty specific to ugc. if he still has contributions to make to the community, he really shouldnt be banned. now if he goes around jizzing on kiddie pics of tftv admins (but i think none of them had kids) then he would probably get banned p quick. as it stands, i dont think its really applicable enough to tftv.

Lennon's still on the FBI's 'Players To Watch List'.

3:28 AM - Antimoon: there was potential code execution for improper sanitization of names
3:28 AM - Antimoon: basically, if you had script in your steam name, it would be passed as-is to the UGC page
3:28 AM - Antimoon: and would be parsed as part of the page's script

apparently this

later

wow nobody sent me an email
fuck u guys

Did you get the original scam e-mail though?

"my name starts with a w so manual hacks never actually get to me" strikes again!

doesnt my name start with a T though

Maybe they filter out THE

no lol
apparently im not cool enough to get all these free keys