so i had this posted for about 20 minutes.. but since it’s been 4 days after the email to customer support and it still remains open, i’m taking it down until it’s fixed. i’ll repost with an explanation of how it was done once it’s safe again (no lawsuit involved :P)
update (11.01.06)
i reported this to 2 myspace employees, and sent another email to customer support.. still not fixed?! (i think) and since this post doesn’t have that many views, i’ll repost what i had originally posted the other day :)
This got fixed a while ago.
first off, once again.. i HAVE emailed myspace support and reported this potential problem, but just like the “private” stuff being exploited, i post it publicly in order for the problem to get fixed faster to ensure the safety of everyone. so before you bitch about this post and how it “feeds the problem”, please realize i am trying to get this fixed for YOUR own good. i’ve known about this since the day after the <x> hack for getting flash links to work again got fixed, but forgot about it until now.
explanation:
as many of you flash kids know, myspace adds code to your embed tags to disable the getURL function. which means none of your buttons work with flash player 9 installed (which myspace forced you to download to watch their videos everytime you signed in until you upgraded). this was done as a “preventative measure” to kill all redirects and other bad stuff you can do with flash. at the time of this “fix” there were a few XSS worms being spread throughout the community. you wouldn’t even know you had it or were spreading it until you saw some strange code in a section of your profile that you didn’t add yourself. blah blah.. it sucks for us flash designers but the overall problem was just too much to take us into consideration. anywho! there’s a simple “workaround” for this “filter” that allows you to bypass the adding of extra code that enables flash links to work once again:
how it works:
myspace does NOT add allownetworking=”internal” to their own slideshows you can put on your page. so how do you add 2 file sources to just one embed tag so myspace thinks it’s a slideshow but it’s really your flash profile? simple. just make sure your browser doesn’t read the first one. there’s two ways to go about this but basically it’s just one. see example below:
the other way is another opening for bored stupid smart people to make more annoying things that spread and shutdown the entire site for hours. i’ll be suprised if myspace doesn’t fix this by tomorrow..
that’s it! you guys can have working flash links for a day :P
This shit is so gettin’ filtered.. lmfao
woo yes you are my savior!
*runs to learn flash as quick as i can :P
First variant doesn’t work for me; second one lets ONE link work.
:-]
hmmm, i guess it’s filtered now – i couldn’t seem to get it to work
oops i mistyped it — it works!
yeah i tried the first one yesterday and it’s no more.. what do you mean ONE link? as long as the “internal” code isn’t added, the should ALL work.
woo! (isn’t that tom’s catch-phrase?)
Haha
Dude, this is *the* best MySpace site ever. I’ve never seen someone find so many holes.
woooo. i have a flash banner on my page with a link :D
boo. all gone as far as i can tell. :(
It’s been filtered already lol
I’m suprised it took so long, I guess they couldn’t just straight filter it or heir slideshows wouldn’t work so they were forced to think about it lol
The concept remains on the example. It still bypasses the allowNetworking attribute but it goes to the home page. Maybe one of you tricky tricksters will think of some other work-around.
I’m trying to make a custom friends display for my profile and cannot get links to work on the flash! Any new ways around it yet??
Yeah it definately doesn’t work now.
I put in this :
and it changes it to this:
I was wondering how you can put a pic on the right side of your profile page. For ex. If you see my space, you’ll notice the smaller pics only lay to the left only. Bigger pics are redundant of course. Any help?
Thanks a heap!! Nemesis
Well this is definately the first step to the ultimate downfall of myspace. I have been along for the ride for a long time now and originaly fell in love with the site as a flash designer it gave me that challenge of creating custom profiles in flash and incorporating features of another website into said profiles. When they shutdown the javascript I said ok, understandable. But killing all flash links is going to far, not only that but it seems quite obvious to me this has less to do with security for users and more to do with shutting out third party widget developers. Well actualy the people who turn out those useless ass ugly as sin widgets aren’t gonna have to much problem since they can include a simple html link with their code or an clear gif overlay link. The people who are really getting screwed over are people like me, joe public user who spent an ass load of time designing a custom myspce profile and now has to completely redesign it and find ways to redo over 50 links (95% of which were on the myspace domain) in html.
Tom, FOX network and all you other a-holes please listen when I say that killing flash links will not stop phishing on your site. Furthemore there has been so many warning and public awareness campaings about phising that anyone who is stupid enough to just enter their username and password into an unexpected login page without checking the browser url probably doesn’t deserve to be on the internet anyway!
Lets be honest, this so called ‘viral phising attack’ depends on one thing to spread, user stupidy.
I think it is only a matter of time before we see the uprising of some “rebel” myspace were users like myself who are interester in design and control of our profiles will migrate over to where we are given the freedom to express ourselves .SWF style.
Lyndon P.
aka lporiginalg
myspace.com/lyndon
This work is licensed under a
Creative Commons Attribution 3.0 License.
I have hacked the flash filter in a sense. http://www.myspace.com/thedamian. check it. It’s done by relatively positioning transpartent div’s over the swf.file. Then use a clear gif. for the link. It’s teadious and only works in IE6+ ,but possible. If you view source on my page you will see div1a through div1h or something. That should help.
Damian,
You did get the links to work well on your myspace. It is round about be hell it works. good job.
Hey, i was wondering if anyone found a new way to get this done. I’m working on a friends list for my profile, and if you see it you’ll know i can’t just put clear gifs or anything over them(cause all the links move). well thx :)
myspace : /the3rdage
This freakin sucks man :-(..Im new to flash and I am working on my first project. I did all the research first, only to discover this mishap. Now I can’t do my link section or friends list…
no one can seem to find an answer on how to put links in the flash pages. I really like my LOVE MY FLASH page but I really like adding my links too! What the heck! I know there has to be some kind of devide or somthing to slip some html in or somthing. ive searched the web over and no joy. solve this one and let me know the answer and ill have a joy boner all my own.
Please someone tell me what to do about this.
MySpace has gone off the deep-end worrying about
phishing,I guess to protect them from lawsuits,
in the meantime,I cannot make links on my profile
clickable,they are re-directed.
Their frigging anti-phishing filter is driving me batty.
All I want to do is hyperlink my home pages and forums
that I post on,and,I even tried using tinyurl.com
and making shorter links,and it dircted people to
a place and declared THIS about me:
The link you are trying to visit has been disabled.
You have reached a link that is no longer in service. That means the link was very naughty, and, much like head lice, had to be eliminated before it spread.
You may be asking yourself, ‘Hey, what was it about that link that got it in trouble?’ An excellent question! Usually, it’s one of the following reasons:
- The link was spam! No one likes spammers, and we don’t like their links.
- You almost got phished! There are people out there who want to steal your MySpace password. They want to log in as you and send spam, harass your friends, change your profile, and generally run amok. Phishing pages are usually designed to look like MySpace to trick you. Other sites may also ask for your MySpace login information to customize your profile, insert videos or slide shows, track visitors, or any number of other things.Don’t make it easy for them. ONLY USE YOUR MYSPACE LOGIN INFO ON http://WWW.MYSPACE.COM!!
- Viruses are not fun! Neither is adware, spyware, or malware. We cut the links to places that are known sources of infection.
If you really did want to check out some spam, viruses, or phishing pages, we’re really sorry to have interrupted. We’re sure you can find it elsewhere. There’s plenty on the Internet
———————————————————————
This is BullSh*t~!
There HAS to be a way around their bogus phishing filter
and there MSPLinks