VKontakte 2.0
Durov.ru is the first and vivid example of User API work. As mentioned earlier, a single VKontakte database is used, as a result, in the login form at the top of the site, enter your username (email address) and password and you will be opened with the same VKontakte, but in a different, more convenient, wrapper (web 2.0). With the new interface, it is more pleasant to view the status of your friends, recent photos, etc ... The only language currently available is English. In addition to a different interface, you can discover a number of new features, functions and effects:
Moreover, the use of durov.ru makes it possible to fully or partially disclose information from other users. With durov.ru you can view closed photos. In addition, more information is available on pages that are protected by privacy settings.
Afterword . My goal was to indicate what the opening of the User API and access to the VKontakte database can lead to, even if through the notorious API itself ... It can be seen that not all data is actually deleted when they are cleared in the interface, but are only marked with a special flag that hides them . Access and close study of the API by literate people can lead to leakage and disclosure of information about users, which the latter would prefer to hide or remove altogether. In addition, VKonakte is a good example of how products are created by local developers - they first make and then patch the holes, after they are widely known about and exploited (the same fast browsing, for example).
- Downloading audio / video directly from the site;
- viewing photos in high resolution;
- automatic display of new messages and update the list of messages;
- view the pages of friends whose accounts have been deleted.
Moreover, the use of durov.ru makes it possible to fully or partially disclose information from other users. With durov.ru you can view closed photos. In addition, more information is available on pages that are protected by privacy settings.
Afterword . My goal was to indicate what the opening of the User API and access to the VKontakte database can lead to, even if through the notorious API itself ... It can be seen that not all data is actually deleted when they are cleared in the interface, but are only marked with a special flag that hides them . Access and close study of the API by literate people can lead to leakage and disclosure of information about users, which the latter would prefer to hide or remove altogether. In addition, VKonakte is a good example of how products are created by local developers - they first make and then patch the holes, after they are widely known about and exploited (the same fast browsing, for example).
')
Source: https://habr.com/ru/post/51120/
All Articles