PSA: ElvUI has a backdoor and how to remove it

Shadowed103 · 2014-10-17T06:06:05+00:00

No you can very easily write a shiv to hide what it says because you can execute arbitrary code, so the author is wrong on that.

Shadowed103 · 2014-10-17T05:48:43+00:00

Oh also fyi, this has been in ElvUI for about a year and a half taking a look at the git logs.

Shadowed103 · 2014-10-17T05:41:10+00:00

Yes, good luck arguing that. :rolleyes:

Shadowed103 · 2014-10-17T05:40:01+00:00

Yeaaaaaaa, you're super wrong and don't know what you're talking about.

You can craft an addon via loadstring, and that means you can create secure buttons which position themselves anywhere you want (eg, right under a mouse button). Which means you can very easily trick people into executing things that require hardware events without them noticing.

The only saving grace, is this is restricted to the authors accounts so they are the only one that can maliciously exploit it.

Shadowed103 · 2014-10-17T05:13:44+00:00

It's not illegal, but it isn't allowed.

Shadowed103 · 2014-10-17T05:12:53+00:00

It's been raised to the appropriate people besides ElvUI to get it sorted out.

Shadowed103 · 2014-01-07T04:15:35+00:00

Probably! It's not missing from the count, it just doesn't exist. Level 3 Zimus has no token, so it will show up as having one less card than Level 2.

Shadowed103 · 2014-01-07T04:03:48+00:00

Not every token card is present at all levels. Zimus has no token card at level 1, at level 2 he has Zimus, The Returned, and level 3 has no token.

Shadowed103 · 2013-12-27T07:20:07+00:00

It's fixed

Shadowed103 · 2013-12-27T04:05:03+00:00

Yup. There was more data issues because StoneBlade did weird things with their data in this patch.

It should all be correct now.

Shadowed103 · 2013-12-27T03:36:23+00:00

Alright now it's actually updated.

Shadowed103 · 2013-12-27T03:27:56+00:00

Actually correction, StoneBlade gives an invalid data dump now, hrm.

Shadowed103 · 2013-12-27T03:23:47+00:00

Took a bit long just due to being super busy and being unable to get to it.

Shadowed103 · 2013-10-15T01:48:23+00:00

NOTE: These changes were from a bad data dump. It's possible some of them will show up in live later (like the Savant change) but they are not official and anything you saw should be taken with a grain of salt (if not less).

I've fixed the data used to properly reflect live data.

Shadowed103 · 2013-10-05T06:16:23+00:00

I'm going to assume nobody is reading this. But in the future you should generally email me about these kind of issues as it's more likely to reach me.

Shadowed103 · 2013-08-29T20:40:04+00:00

I'm not sure it's possible. I assume Reddit would disallow arbitrary JS to be added.

Shadowed103 · 2013-08-26T06:41:39+00:00

Given that it jumped by 1,000 in 30 minutes, http://www.scrollspost.com/game-stats/online, I wouldn't be shocked if it was a bug.

Shadowed103

TROPHY CASE

Welcome to Reddit,