Category: Tips

Categories
Tips

Using GreaseMonkey Scripts in Opera! [How-To]

Our reader Moses wanted to use GreaseMonkey scripts in Opera! If you are also interested in using GreaseMonkey scripts on opera here comes the two-step procedure…

 

# Step 1: Configuring folder to store GreaseMonkey Script (Need to do this once only)

  • Create a directory to store greasemonkey scripts. (e.g. C:GM_opera)
  • Go to Tools >> Preferences, it will open a window like below. 

Opera_Preferences

  • Navigate to Advanced Tab, then click on Content option in left menu.
  • Click on JavaScript Options. It will open another window like below…

Opera_greasemonkey_scripts

  • Click on Choose button to create a folder or select a folder to store GreaseMonkey scripts!

ADVERTISEMENT

 

ADVERTISEMENT

# Step 2: Adding GreaseMonkey scripts… (for every script…)

  • Click on any GreaseMonkey script link. (URLs ending with .user.js extension)
  • You will see a plaintext file getting opened in browser without any install pop-up as you usually see in firefox!
  • Go to File >> Save as  opera menu option. When prompted location to save script, navigate to the folder you selected in Step-1!
  • Thats it! Just by saving GreaseMonkey scripts to preconfigured folder you can use them in opera!

 

ADVERTISEMENT

#Few Notes…

  • To Uninstall: Just delete the script from folder or move script file to some other location!
  • To enable/disable: You can’t. Only Install/Uninstall options are available. Or you can move files to different folder.
  • To change sites script works on: Open script in any text-editor and change @include and @exclude directive manually in script file.

 

#Compatibility Issues…

Most GreaseMonkey scripts will work without any modification as they do not make use of GreaseMonkey APIs.  But for those who make use of API you can install Emulate GreaseMonkey functions opera userscript. Installation method is same as mentioned in step-2.

ADVERTISEMENT

It may not works always but its really worth trying. So installing above script is highly recommended.

As an example our Facebooks Ignore ALL button script just works fine but Block ALL script is not working as it makes use of GM_xmlhttpRequest call which even above emulator script failed to implement! This may be bad news for orkut users as all scrap all scripts makes use of GM_xmlhttpRequest call.

#Resources

Categories
Tips

Orkut Script: One-Click Scrapbook, Album & Add to Friend-List Links!

This script is to ease orkut navigation. It basically adds three hyperlinked letters near every profile link:

  • [S] for Scrapbook Link
  • [A] for Album Link
  • [F] for Add to Friend List Link

Here is the screenshot…

Orkut_Easy_Navigation_links

It may look little bit cluttered but I am using this script from more than a year. Only thing I forgot to post about this on this blog.

Unlike other scripts which opens pop-up containing scrapbook, album and other useful links whenever you right click on any image linking to orkut users profile, this script doesn’t show any popup! Also if you have noticed it takes only one-click to open any users scrapbook, album and friend request page.

Installation:

OR

Helper Script: Auto Confirm friend request – Highly useful with [F] links generated by this script. More details are here.

Categories
Tips

Trick to Find All Communities Owned by Any Orkut User!

Yep. Its tricky job to find all communities owned by any orkut users! When you got to any orkut users profile its shows communities joined by that user as well as mutual communities. But there is no direct way of knowing how to find communities owned by orkut users.

So you need to use following trick…

  1. Navigate to any orkut users profile whose communities you want to find
  2. Paste following codes into the address bar and hit enter

Above code will take you to a community search page where you will list of community owned by above user (step 1)

Communities Owned by A Orkut User

Thanks to Arunim and Mr Nobody who discovered this trick. (via Gaurav)

Categories
Tips

Bypassing Orkuts Image Verification while Sending Images!

orkut_image_verification

Many users of Scrap All Script had problem sending images with script! Problem is if you have image hosted on third-party server orkut turns on image verification (called CAPTCHA) which script can not bypass!

So here are steps to bypass orkuts image verification while sending images…

  1. Save image on your PC first. (If image is located somewhere else online download it to your PC)
  2. Go to any orkut your scrapbook. There is a button add photo beside button post scrap
  3. Click on add photo button their. That will open a wizard to add photo to scrapbook as shown in screenshot below.
  4. Click Browse button and select image from PC.
  5. Next click Upload Picture button.
  6. When uploading is done you will see a URL in scrapbook text box.
  7. Copy the above URL and paste it in Scrap All scripts text area. The image will be sent without any problem.

orkut_add_photo_to_scrapbook

Also next time while scrapping you can click on link Picasa Web Albums directly as shown in above screenshot to insert images directly from Googles Server. Every image you sent this way is saved online into Picasa Web Albums.

Image verification has gone because your image is hosted on Googles server. Please do not confuse this with breaking of orkut CAPTCHA or breaking of image verification. 🙂

 

Related Link: Scrap All Script – Send a scrap to all orkut friend with one click!

Categories
Tips

Auto-Confirm Friend Requests on Orkut!

say_yesThis is one of the oldest script I have created and used on Orkut. Just today only I came to know that I never posted about this!

Anyway technically its simplest script I have ever written.

#What it does?

Whenever you add someone to your friend list on orkut or approve any pending friend request, orkut takes you to a confirmation page showing two options!

Case 1: Adding someone to your friend List!

Orkut_Add_friend

Case 2: Accepting a pending friend request!

Orkut_accept_friend

Now all this script does is it clicks on send button in Case 1 and accept button in Case 2!  Thus automatically confirming the action positively and redirect you to the next page!

ADVERTISEMENT

Installation:

ADVERTISEMENT

OR

 

Related Scripts:

  • Pending Friend Request Deleter: This scripts deletes all pending friend request in your orkut account! You will need this if you have too many pending friend requests!
Categories
Tips

View Locked Orkut Album in Orkut Style!

Important Update: This hack is rectified by orkut. SO IT WILL NOT WORK ANYMORE. If I find a new hack I will definitely post it here!

You may subscribe to my RSS feed or email alert to receive automatic updates regarding this and other hacks in future! (Jan 17, 2008)

This is highly recommended way of exploiting Orkut album hack to unlock (view) pics in the album!

View_locked_orkut_album

Many users claimed that our old orkut album hack is not working. While we noticed few exception most of the users had trouble in copying and pasting lengthy javascript code. So here comes an automated way – a GreaseMonkey script!

Once you install above script successfully, next time you go to any Orkut locked orkut album, you will see pics from locked orkut album in orkut style alongwith error message which obviously lost its meaning! (See screenshot above)

ADVERTISEMENT

#How to Install (Need to do this only once!)

ADVERTISEMENT

Thats it! All locks will be broken automatically as they never existed! 😀

#Credits:

Thanks Leandro Koiti Sato for creating this script script. Original script is here. We made a small change in our version to give maximum result to our users!

Thanks Bean for notifying about script! 🙂

Important Update: This hack is rectified by orkut. SO IT WILL NOT WORK ANYMORE. If I find a new hack I will definitely post it here!

You may subscribe to my RSS feed or email alert to receive automatic updates regarding this and other hacks in future! (Jan 17, 2008)

Categories
Tips

AutoPlay YouTube videos in your blogs and sites

Many of you has your own blog and to make it more intresting, you usually add videos from YouTube. But when you embed a video in your blog it does not start automatically. Many a times you wanted to start it automatically, but there was no option to do so. I have created a hack to autoplay YouTube Videos in your blogs and websites.

This is an example of your YouTube html code:

Now just add the param “&autoplay=1” as shown below:

Now your videos will start automatically just after the page loads. This feature is important when you want to welcome your guest with an introduction video.

[Editor Note: This post is by guest blogger Omkar Dutta. He blogs at Tech Thunder on Internet & technology. If you like to write for Devils Workshop, please check this. Details about our revenue sharing programs are here.]

Categories
Tips

Orkut Viewing Locked Scrapbook Hack is Back!

Important Update: This hack is rectified by orkut. SO IT WILL NOT WORK ANYMORE. If I find a new hack I will definitely post it here!

You may subscribe to my RSS feed or email alert to receive automatic updates regarding this and other hacks in future! (Jan 3, 2008)

Yep! For those who missed old orkut hack to view locked scrapbook, a new hack to do the same is here!

orkut-unlock-scrapbook

#Steps to use this hack…

  • Navigate to the profile with locked scrapbook or locked scrapbook itself.
  • Now You will see Profile ID in address / navigation bar. Ex. In http://www.orkut.com/Profile.aspx?uid=10226448830416481862 , 10226448830416481862 is Profile ID. Note down this Profile ID.
  • Now replace Profiled in following URL with Profile ID you have noted above.
  • http://x13.110mb.com/scraps.php?uid=ProfileID
ADVERTISEMENT

Finally paste new link in address bar. Hit ENTER and you will get scraps.

ADVERTISEMENT

#Alternate way… (Javascript)

  • Navigate to the profile with locked scrapbook or locked scrapbook itself.
  • Paste Following javascript in address bar and hit ENTER.

javascript:var dw = document.location.href; dw = dw.split('=');document.location='http://x13.110mb.com/scraps.php?uid='+dw[1];

#Alternate way… (For Firefox Only)

You can drag-n-drop following bookmarklet on your browsers bookmark toolbar. That will create a bookmark named “UNLOCK SCRAPBOOK”. Just click on it whenever you encounter any locked scrapbook and you will be redirected to unlocked scrapbook automatically…

Unlock Scrapbook

Looks like a bad start for orkut in 2008. Thanks Gaurav!

Important Update: This hack is rectified by orkut. SO IT WILL NOT WORK ANYMORE. If I find a new hack I will definitely post it here!

You may subscribe to my RSS feed or email alert to receive automatic updates regarding this and other hacks in future! (Jan 3, 2008)

Categories
Tips

Orkut Scrapbook XSS Bug is Still Active!

After two days we posted about scrapbook bug and demonstration of its destructiveness  by Rodrigo Lacerda (Portuguese link) and Gaurav, it looks like orkut team haven’t got enough of it!

So on request of some of the members and also to force orkut to take this more seriously we are partially revealing the bug…

The bug is in embed tag’s src attribute! Orkut doesn’t validate if src is pointing to valid flash media file URL and thus any URL submitted as value of src attribute just get executed when user opens scrapbook! This is different than most infection where user have to generate some event like clicking on a particular region, link,  etc.

Proof of Concept 1:

ADVERTISEMENT

Here is harmless but highly annoying code which you can put in your friends orkut scrapbook. This is the reason why some people were getting logged out of orkut just by visiting their scrapbook!

Code:

 

ADVERTISEMENT

Proof of Concept 2:

More serious but harmless exploitation is a worm created by Rodrigo Lacerda (Portuguese link) which is performing following routine.

  • You read the scrap with code (infact just open the scrapbook with code)
  • Code injects javascript in your browser
  • Javascript code makes you join the community
  • Then code collect your list of friends
  • Send the scrap with the code for them!

The community which is being joined is Infectados pelo Vírus do Orkut! Just check out the community page and reload it. Look how fast the number of members increases. 🙂

 

ADVERTISEMENT

Solution:

Solution is in the form of flash block extension we talked about in earlier posts!

 

What should orkut do:

  • They should first activate CAPTCHA (i.e. image verification) for all URLs including their own. That way worm will stop spreading itself!
  • For future they should validate user input properly. XSS is most of the time result of improper validation of input. Like here they haven’t checked URL for filetype!

 

Update: Orkut in a official blog post claim to fix the bug! But this embed tag’s bug is still open! They might have fixed other bug which Rodrigo used!

Link: Post by Rodrigo Lacerda (in Portuguese ) | Flash Block Solution | Gaurav post | Orkut’s official blog post

Categories
Tips

Beginners Guide To OpenSocial & Orkut Sandbox! [covering FAQ]

In this post, I will try to clear your doubts on orkut sandbox and opensocial API. In the end I will be listing resources that you can use and bookmark!

#What is OpenSocial?

From wikipedia,

ADVERTISEMENT

OpenSocial is a set of common application programming interfaces (APIs) for web-based social network applications, developed by Google, and released November 1, 2007. Applications implementing the OpenSocial APIs will be interoperable with any social network system that supports them, including features on sites such as MySpace and Friendster.

Except facebook almost all social networking sites are using OpenSocial. Means you can safely assume if you write application for orkut using OpenSocial API it will work on other sites (like MySpace, LinkedIn, etc) almost without change! 🙂

#What is orkut sandbox?

First lets get relevant definition of sandbox from wikipedia…

ADVERTISEMENT

"The term sandbox is commonly used in the development of Web services to refer to a mirrored production environment for use by external developers. Typically, a third-party developer will develop an create an application that will use a web service from the sandbox, which is used to allow third-party team to validate their code before migrating it to the production environment"

So think of Orkut Sandbox as orkut mirror where you can write application using Open Social API. Its like creating a fake orkut account to test new orkut hack. Think of sandbox as a fake profile with some features added/removed and created by orkut itself for you to test applications!

#Cool… How to signup for orkut sandbox?

ADVERTISEMENT

By default sandbox access is disabled for a orkut account. You can request access to sandbox using orkut sandbox sign up form. The sandbox access is completely free and will require you to have orkut account beforehand.

After submitting sign-up form you get mail from Google (normally in 2-3 days) indicating status of your request.

#How to access sandbox? Where it is?

Sandbox is extension to your existing orkut account! After receiving confirmation mail from google you can just log on to http://sandbox.orkut.com to enter into sandbox. Also you can modify any orkut pages’ URL to get its view from sandbox.

ADVERTISEMENT

Example:

http://www.orkut.com/scrapbook.aspx?uid=[some_num]

will become..

http://sandbox.orkut.com/scrapbook.aspx?uid=[some_num]

This small URL change once resulted in scrapbook hack which enabled people to read locked scrapbook via sandbox!

ADVERTISEMENT

 

#Sandbox Limitation

OpenSocial API Calls will operate on sandbox whitelisted friends only. This means to test your applications you need either your friends to gain sandbox access or add people who have access to sandbox as friends. There is an orkut sandbox community where you can find people with sandbox access and add them.

This limitation is enforced for security reasons as explained by Arne Roomann-Kurrik!

Also private information like email addresses of users can not be accessed! So spammers do not think about sandbox as a way for your evil intentions 🙂

#Resources

If you are not familiar with words like sandbox, API use following wikipedia links…

Best starting point for developers…

Worth bookmarking….

Finally if you need to communicate…

Let me know if I missed anything! Happy coding… 🙂