Archive for December 7th, 2008

Tasmanian Devil

Dec 6, 7:25 PM, IM

Arshan* to me:

noscript saved me today, literally, from none other than the infamous samy

Dec 7, 3:16 AM, Email

From: samy**
To: Giorgio Maone
Subject: giorgio, i'm mad at you


I am mad at you. My friend, Arshan Dabirsiaghi, whom I will refer to from now on only as "the persian", was viewing a web page. The web page in question had what the kids these days are calling, "XSS". The XSS was malicious. As malicious as a chicken nugget from McDonalds. Worse, maybe.

But you see, my friend, the persian, was not affected. Why is this you ask? I asked him the same thing. He told me that I should blame you for him being safe. I don't think he literally meant come to you and blame you, but you see, I am coming to you anyway and blaming you. He was running this extension (of his penis) known only as NoScript, or what I will refer to as "the devil's plugin". And for this, I am angry. Angry at the plugin, the use of it, and by extension the author. You, sir, you. That is all. All I can do now is attempt to correct your rights.

Good morrow to you, fine sir.

Your frienemy,

*Arshan Dabirsiaghi of Aspect Security and OWASP, lead developer of the OWASP Anti-Samy Project.
** The infamous Samy, author of the eponymous MySpace XSS Worm.


The original Samy's message contained a slightly antizionist joke about Arshan's supposed descent. I edited it out even if Samy gave his consent for verbatim publishing, because Guanxi made me notice that some people may find it offensive rather than parodic, or even worse read it as an implicit justification for antisemitism.

Update 2

I re-edited the original message after Samy suggested me a way to make it become, "all of the sudden accurate rather than offensive".

Bad Behavior has blocked 931 access attempts in the last 7 days.