TIFU by deleting Reddit's #1 top post of all time
Happened just now. Sorry for my possible slips as English is not my mothertongue. I mostly only lurk around, but this time I decided that it's something worth sharing, given the spirit of the sub.
I've been in quite a low mood because of some job related bullshit. Usually when I get depressed at home I start doing the dishes, dusting the rooms, and what not, not even because I like keeping things clean but removing my so to say "traces" are a small subconscious obsession of mine.
See, since I'm not under a huge load of work it suddenly occured to me that checking my email's "Accounts" folder and terminating the ones I don't use anymore would be a nice idea (both out of privacy-related paranoia and just for the heck of it). The thing is I used to have an Imgur account a lo-o-o-ong time ago (plz don't bully), so I decided to delete it as well, but that didn't seem quite possible to do the traditional way, since I didn't get it by registering at the service directly. I'll omit the details of all the cyber sex I went through with my keyboard and the browser, but I somehow got the long awaited notification confirming the fact that my account got discontinued, so I pretty much forgot about the whole deal. But little did I know.
Later in the day I get back to browsing some picture subreddit and notice that some Imgur posts linked on the page suggest me to delete the image, although it wasn't even submitted by me. In addition to that I still seem to be logged in, although no username shows up in the top-right dropdown user menu. Being the total jackass of an idiot that I am, after checking and confirming this with a few more links, I decide to google the #1 top Reddit post of all time, which, of fucking course, is a link to a post on Imgur (yeah, the one about the Senate, with a total of whole damn 310K updoots). I open it and see the tempting red button suggesting me to praise Satan himself. Of course Imgur won't allow me to do that, those buttons probably don't work, do they? It can't be this bugged, right? (I hadn't clicked one by then YET). So I click the button a-a-a-aand see the title of this TIFU.
I'm sorry. I didn't want to. Please, forgive me everyone. I'll commit Sudoku before the shame befalls on the name of my forefathers. If somebody working for Imgur sees it here, please, report it to who it would be most appropriate.
TL;DR: I deleted Reddit's #1 top post picture by playing around with Google sign-in on Imgur.
P.S.: resubmitted because it didn't have TL;DR in the beginning
Edit: link for clarification (try clicking the original "Senate" post's title link).
Edit 2.0: I guess I am the senate now
Edit 188.8.131.52: I submitted the bug to Imgur's contact form just in case...
Edit 4.1.15: just got from work to find a message from u/BindersFullOfWomen on the behalf of Imgur's team, so the bug seems to be closed by now, the picture's back too That's pretty cool and fast of a reaction for such a huge service, especially for me since it's already post working hours for me (I know, I know, time zones'n'shiiieeet).
Edit over 9000:
Edit "I lost the count": 666 updewts
Edit from the high ground: What the heck? Gold, 30K+ updanks, /sub/all and numerous crossposts? IRONIC
Edit from a long time ago in a galaxy far, far away: holy shit, now the title of the Imgur post attached to the original Senate one has my username engraved into it!
"Nah theres no way"
checks top post of all time
Mate, you've just made Reddit history
Saw the big red button I wasn't supposed to push
I fooken pushed it m8
God damn you're my favorite type of end user
I feel like I'll be remembered as
that ass that did bad
Instead of shooting my own knee I shot my own head
It’s treason then.
The Tragedy of Darth u/Q-Key The Unwise
Whenever a software engineer tries to make an idiot-proof UI, the user community goes ahead and provides a better idiot.
Hey well now when people google 'the senate', they'll get a little box saying it does not exist, so not all is lost.
And don't worry, we're all proud of you in some weird way.
Reminds me of this
So what you're saying is that if "hypothetically" someone re posted, it wouldn't be a repost?
What? How could you do this? This is outrageous. It's unfair!
I work with the Imgur team. I'm telling them now.
Edit: Imgur is aware of the issue and working on a solution.
Jesus H. Christ.
I would think "Surely Imgur will have a backup that they can use to undo this", but I also would have thought "Surely Imgur has a basic functional username and password system before seeing this."
Imgur, your software is bad and you should feel bad.
I felt a great disturbance in the force.
I hope I still have a chance to save myself though.
DEVELOPERS DEVELOPERS DEVELOPERS DEVELOPERS
That's obviously a bug, because by that time I had even formally terminated my account
I still don't understand, how did you even get the ability to delete a picture from imgur? I know someone who desperately wanted to take something off imgur, and he had submitted it himself, and still couldn't delete it.
If an item does not appear in our records, it does not exist!
-That annoying af Jedi archivist also known as Jocasta Nu
(Shakes while crying)
I know, I didn't mean to!
He couldnt help others..or himself
I work with the Imgur team. I'm telling them now.
I love how this sounds. It's like /u/_BindersFullOfWomen_ and /u/q-key are on the playground and he said a dirty word and you're running off to snitch on him to a teacher.
Hahahaha that's great.
Just started at a new company ~6 months ago and for the first time in my life, I have a QA department! Man, they will break literally anything and everything. I love to hate 'em.
Thats still better than fucking a coconut man
Please don't commit Sudoku, four one threeing you have two much two live four.
Did you ever hear the tragedy of /u/q-key the Negligent?
I thought not. It's not a story the moderators would tell you.
Rebellions are built on hope.
To be fair, a "let's poke a scorpion" trophy would be way cooler.
We negotiate the terms of surrender
That was my exact thought when I saw the result
That's just hilarious. To be fair I would've probably done the same. Red buttons are always soooo tempting to press.
Not really. It's more like q-key found a scorpion on the playground and instead of quietly telling a teacher he screamed "look what I found." Creating a situation where other people on the playground could poke the scorpion and cause a ton of problems that would have been easily avoided had the scorpion been reported to the teachers responsibly.
TL;DR: if you find a security flaw on a website, responsibly report it. Don't just announce it. There's a reason I have a reddit White Hat trophy and not a "let's poke a scorpion" trophy
I'm dreaded to think what my code would cause if it was used in any project of this scale tbqh though =/
You will hate them. And they will save your ass countless times, so you will love them. As it is written.
Fucking a coconut, man.
Fucking a coconut man.
"Some humans would do anything to see if it was possible to do it. If you put a large switch in some cave somewhere, with a sign on it saying 'End-of-the-World Switch. PLEASE DO NOT TOUCH', the paint wouldn't even have time to dry." -Terry Pratchett
Emmm... Thanks for letting them know, I see that the pic is there again. Were you the one who reported the post to the mods though? And I thought I was going to get my first ever karma fest as a lurker =\
You have two 2's and 4's in the same row, mate.
That was a surprise but not a welcome one.
Nobody cared who I was until I fucked up Imgur
It seems like when op's account got deleted, he ended up logged into to some NULL account, or no account, and this caused imgur to think any image with no account attached to it, belonged to his non existent account.
I spent over a decade in QA. One of my favorite jokes is: A QA walks into a Bar.
They order 1 Beer.
They order 2 Beers.
They order 0 Beers.
They order -1. Beers.
They order 999999999 Beers.
They order a Lizard.
You'd be surprised at how many GUI bugs following that finds...
Well, at least you won't be remembered as Reddit's first cocofucker.
It's not your fault. When learning to implement oauth, engineers should pay more attention to the warning "AUTHENTICATION IS NOT AUTHORIZATION"
If anything you've helped them become more secure. Gg.
TL;DR: if you find a security flaw on a website, responsibly report it. Don't just announce it.
How about some gratitude? u/q-key did you a favor by letting you know. And you have the nerve to criticize him? I don't think the user is under any obligation to "responsibly" report bugs, in fact you're fortunate it was reported in the way it was.
That's just what they told the padawans who kept tripping over their own feet in training.
"Do you know where we can use a warrior of your immense talents? The library!"
No. I meant what I said.....
But what about the droid attack on the wookies?
Also an incredibly powerful Jedi, IIRC. The Jedi put powerful warriors in command of their collections of knowledge to defend them against those who would use them to nefarious ends. At least, they did during the Old (and best) Republic, and if memory serves me, they still kept the tradition going until their downfall.
Was "You MONSTER!" your second thought?
Holy shit OP thanks for the trip down memory lane, it's been a while since I've said DEVELOPERS in my head
I used to work for SmugMug.com. All employees had a hero persona, as I worked in the QA department I chose the hero persona of TwoFace. I thought it was perfect for a QA guy.
While I can't code for shit, tell me what you need and I can't even start it, but, get it started and need it to be be stress tested, well shit, I am your guy, i can read nearly any code there is and figure out the issue with a bit of googling and trial and error.
I use Backblaze as my backup service. They offer an unlimited backup amount. I called them out as bullshit since there is a filesize limit to the .dat file they use as a flat file for the database of files you have.
Well it turns out I was wrong, it wasn't that anyone can reach the file size limit, it was that I, had somehow, still not sure how, created a recursive backup within a folder which caused the .dat file to reach 8 gigs in size.
This was something the support team at backblaze had never seen.
I ended up in emails with the CTO expressing his flabbergasted..ness at how much I had broken what was an unbreakable system.
All that to say, you make it? I break it. And that's why I do QA.
It's a story that is coarse, and rough, and irritating, and it gets everywhere.
Look in top posts this year
I managed to get a password to a G+-connected Imgur account, then delete it, somehow I stayed logged in and got the POWER to delete other people's unlisted posts, e-z as that
It's freaking crazy... dude using maggots instead of lube while penetrating a coconut, another dude creeps out some 16 year old because he loves cocos and some other coco lover almost ruins his marriage because of his weird fapping choices. Seriously Reddit, WTF happened?
Edit: u/DaddyLongStrokes404 asked me nicely to not mention him in this post because he already feels enough shame, so I won't mention him
They staggered home single file!
You wanted to delete account, but you ended up with the delete-account. Interesting twist of fate.
He is your typical end user in this scenario. Obviously no malice was ever involved. Put the burden of this atrocious security flaw on yourselves at imgur, not the end user who experienced it. Authentication is not authorisation.
I worked as a temp for an insurance company for a while having just come from an online start up company where I did a ton of UI testing for the devs.
The insurance company devs would come to me and say "Hey Wafflefoxes, would you test out this form for us?"
"Sure thing! <types \ "&)] into First name field and promptly breaks the form>
"Oh common, nobody is going to type an ampersand in their name!!"
<.....long meaningful stare>
It's only fair you upload your own picture in it's place. Sorry, dawg.
You should just replace it with a coconut picture
I'd personally prefer A New Hope
Hey aren't you the guy who deleted that picture from reddit?
How did I miss this? I didn't skip Reddit a single day this week and suddenly this is all over the place
Yeah that was kind of a poorly worded response, seemed condescending
TBH I would press that button to see how it would end the world and because I would not believe it does anything.
I see u/q-key smile
We escort the men off of Reddit
While they search for an Imgur file
Tens of thousand of searches flood the site
Their servers groaning and screaming
As the users give up for the night
I see the search request they're seeing
"The post cannot be found"
So strange. I'm on Reddit all the time but totally missed this. You monster.
I think it just means he could have deleted any of those pictures.
This is not a story the imgur admins would tell you
Hey, that tail looks pretty ne
Do you really shit in a bucket, fam
So this is how shitposting dies, with thunderous upvotes.
What was the original image?
It's why I call them idiot resistant UIs! It'll be fine for most idiots, but, just like bullet "proof" glass or water "proof" pants, get enough idiots (or a certain kind) and they break your system!
Hahaha. Seriously though Jedi Librarians are formidable warriors for a reason.
Post removed. What was it about??
Shit... Sounds like I was better off missing out lol
Oh yeah I totally get the severity of the situation but pushing aside responsibility or consequences and just reading your text standalone, that's what it sounds like.
I'm so confused, when I check top posts of all time I don't see this Senate post, I see the guardians of the front page thing. What's happening to me?!?!
Fuckin' A, Coconut Man.
Not from an Imgurian.
Damn purple presser.
Thats weird it was gone earlier
Edit: nvm I read OP's edit
Is it possible to learn this story?
Not too long ago reported a rather serious security bug on a popular website and I was treated very rudely for my trouble. Far, far from even a basic 'thank you' quite the opposite actually.
So meh, now I prefer the 'look what I found!' approach.
I have busted lip and am forced to keep my mouth partially open. Because of this I just drooled all over myself laughing at this.
You have unlimited power, you could fuck up imgur for a bit
I deleted them
All. The title, the comment.
And the image too!
I'm a bot made by /u/Eight1911. I detect haiku.
Punish me, daddy, hnnnggg
This needs to go to Reddit museum
Did you ever hear the tragedy of Darth u/q-key the Unwise?
You stand in the presence of Lord Q-key, first of his name, that ass that did bad, breaker of posts and pics, enemy of the imgurian nobility, and the Senate. Bend the knee.
Are you doubting THE SENATE?
Hey are you the guy who deleted that picture from reddit?
u/q-key ... You're breaking my heart!