ok… really? the person who made this seriously needs to retake kindergarden. really? really?
Did you know?
When someone makes a post like this and claims it to be a fact, they’re thought of to be stupid. Also, ANIMALS DON’T HAVE ANY ACCESS TO A COMPUTER WHAT SO EVER!
I thought she was being sarcastic but then she messaged me:
Oh.
Tumblr recently added a footer to the bottom-right corner of the iPad interface. This renders the “try again” link almost completely unclickable because the footer creates an invisible barrier at the bottom of the page.
Tumblr, please stop breaking things in the stupidest ways.
A compilation of confused Tumblr users.
i’m so fucking glad tumblr hired the leftover coders from fa lmfao
The blog, picture and post have all vanished now, so I think it’s safe to assume the staff have the situation under control.
Doesn’t change the fact that they fucked up pretty badly by allowing it to happen in the first place.
FIX YOUR FUCKING WEBSITE, KARP. I LEARNED ABOUT CROSS-SITE REQUEST FORGERY TOKENS IN MY FIRST FUCKING YEAR OF WEB DEVELOPMENT. THIS ISN’T HARD.
lowtax replied to your post: So there seems to be some kind of “virus” going around Tumblr at the moment
i just reblogged it because it made absolutely no fucking sense and i thought it was hilariously bad
I’ve seen quite a few others reblog it too, though, and they definitely didn’t intend to do so.
Actually I thought you were just reblogging it because of how terrible it was at first, but then I looked at the post’s notes and you’re probably one of a few dozen people at most who reblogged it intentionally.
There’s a picture of a trollface sitting at a computer with Portuguese (?) text going around Tumblr at the moment. It has a ridiculous number of notes (about 180,000 at the time of writing) and there doesn’t seem to be any reason for it. But what’s weirder is the notes:
Huh. So what’s going on exactly?
My best guess is that this “trolling-maximum” guy found an exploit in Tumblr and used it to create a viral post. And sure enough, this is the URL I get redirected to when I try to visit his blog from an Incognito window (where I’m not logged in):
https://www.tumblr.com/login?redirect_to=%2Ffast_reblog%2F22660370044%2FMxn0bxMB
Sneaky. Looks like Tumblr forgot to put in a CSRF token in this “fast_reblog” feature. Sure enough, by grabbing the page’s HTML from `curl` here’s what we see, among other things:
<img src="http://static.tumblr.com/rqpbbcr/eD8m3puns/trol.jpg" style="-moz-border-radius:10px; width: 100%"/>
<iframe frameborder="0" width="0%" height="0%" src="http://www.tumblr.com/fast_reblog/22622537151/zBX2HsG1" style="background-color:transparent; overflow:hidden;" ></iframe>
<iframe frameborder="0" width="0%" height="0%" src="http://www.tumblr.com/fast_reblog/22660370044/Mxn0bxMB" style="background-color:transparent; overflow:hidden;" ></iframe>
So a logged-in user won’t know that anything’s up just by visiting the blog. Again, clever! But obviously not something you want to happen to your own blog.
What does this mean you have to do to avoid getting “maximally trolled”? Don’t click on the Source link if you see this post. More accurately, don’t go to that blog at all. From what I can tell, doing so will cause the post to be reblogged to your own blog - possibly multiple times in a row, judging by the notes on the post.
Please reblog this to spread the word!
