04-01-15 04:51 PM
43 12
tools
  1. LOCOSDEL136_ORG's Avatar
    -screen-shot-2015-03-28-6.14.19-pm.jpg
    After rounds of match ups pitting flagship devices against each other we are just days away from crowning this years Mobile Madness winner. The finalists are the BlackBerry Passport and the OnePlus One. The BlackBerry Passport beat the Motorola Droid Turbo, Samsung Galaxy Note 4 and HTC One M9 to reach this final round. While the OnePlus One fended off the Apple iPhone 6, Samsung Galaxy S6, and BlackBerry Classic to claim a finalist spot.

    Who will win? Both the BlackBerry Passport and OnePlus One are unconventional flagships. The Passport sports a square but work-friendly form factor and the OnePlus One claims the title of The Flagship Killer and does not even have the support of a traditional distribution channel (i.e., carriers and in-store availability). So who will it be readers? The BlackBerry Passport or the OnePlus One? You decide!
    pyBerry likes this.
    03-28-15 05:17 PM
  2. mad_mdx's Avatar
    Tried to vote, says my email has already been used to vote.
    Tried a different email, same message. Looks like bullsh
    03-28-15 05:28 PM
  3. LOCOSDEL136_ORG's Avatar
    Tried to vote, says my email has already been used to vote.
    Tried a different email, same message. Looks like bullsh
    Yes,,: new Mail
    03-28-15 05:41 PM
  4. tottenhamhotspurfan's Avatar
    Tried to vote, says my email has already been used to vote.
    Tried a different email, same message. Looks like bullsh
    Was the same for me, my email has already voted.
    03-28-15 07:29 PM
  5. amccray5's Avatar
    ^ this

    Posted via CB10
    03-28-15 08:05 PM
  6. David Theado's Avatar
    Same here... never been entered previously

    Posted via CB10
    03-28-15 08:10 PM
  7. aha's Avatar
    Why don't one of you guys who were rejected tries to vote to the Android phone with the same email and see what happens?



    Posted via CB10 with PassportSQW100-1/10.3.1.2576
    03-28-15 08:52 PM
  8. Wrec's Avatar
    Same for me, email address was already used

    Passport OS 10.3.2.281
    03-28-15 08:56 PM
  9. ivantoothache's Avatar
    I voted for the one plus vs classic... now i'm voting for the passport.

    Posted via CB10
    anon(5061193) likes this.
    03-28-15 10:00 PM
  10. Marauder2's Avatar
    Same here. Tried 4 different emails

    Posted via CB10
    03-28-15 10:00 PM
  11. ummie4's Avatar
    Same for me, email address was already used

    Passport OS 10.3.2.281
    Just tried it and think I figured it out. If you swiped your email address up its adds a space and give you that message. If you delete the space after your swiped up address it will take it. At least it did for me.

    Posted via CB10
    MikeOWaterloo and Chavez78 like this.
    03-28-15 10:03 PM
  12. johnny_bravo72's Avatar
    Maybe they invalidated those who voted multiple times during the previous polls.

    Posted from an ME173X
    03-28-15 10:04 PM
  13. brendanr6's Avatar
    My email address was fine

    Posted via CB10
    anon(5061193) likes this.
    03-28-15 10:06 PM
  14. tmurphx5's Avatar
    Worked. For me, got an email from polldaddy to confirm. Check your email.

    Passport running on 10.3.1.2576
    03-28-15 10:10 PM
  15. MrVeda's Avatar
    Just voted also - seems to work. Got the following message after clicking to Vote:

    Voting for this round will run though March 31. The winner will be announced April. No April Fools joke, promise.

    An email has now been sent to xxxxxxxxxxxxx. Click on the confirmation link to register your vote. Check your Spam/Junk folders if you do not see the email.
    Return To Poll


    Posted via CB10
    03-28-15 10:29 PM
  16. jvictor77's Avatar
    Yes it was the space thing when you swipe up your email address. I typed it in from scratch and it worked!

    Posted via Passport  The Beast!
    03-28-15 11:01 PM
  17. secops's Avatar
    I did a little research to make sure they're doing things fairly since it some users are saying that their email addresses aren't working.

    • There is a back-end check from poll daddy against both a get parameter named 'cookie' and an email address.
    • When you input your email address and press send, there is a single get request sent to vote-js.php on poll daddy's servers.
    • Where the parameter 'a' is the vote which is the radio button's value. Though, since it's hard coded into the parameter I believe it's a value which poll daddy understands telling the server code which vote to increment. xx2076 is the passport and xx2077 is the One-Plus-One.
    • Next, another GET is sent to the same poll daddy URL with a few parameters, though it's basically the same request.
    • Finally an email is sent including a link which sends a parameter 'activation' to the server with a value of some MD5. I wasn't able to reverse engineer the md5 token, with anything super simple, however one could imagine it should include email address, vote and which poll.


    Now, there's a lot of stuff to understand, and work to be done if you want to reverse their entire voting process but it does look like they're doing what they are supposed to be doing; the "email already submitted" is a default error message against both duplicate emails or malformed emails/requests.

    It is still possible that they (TB) would have collected information about those they believe are cheating and tried to fingerprint them and invalidate votes coming from them. This would require that PollDaddy has a blacklist framework in place with an API that TB could use. ex. (Block IP Address A,B,C...; Block Email A,B,C...)

    One major caveat is that you could defeat this poll by somehow enumerating email addresses being sent to the poll daddy and voting for them, or exploiting an XSS on any page at technobuffalo and sending the link to forums where users of either device are voting.

    Also note that it does look like the voting is vulnerable to XSS or mail injection because there are a lot of strings being passed from server to server (TB<->PollDaddy<->Email). Though I haven't taken the time to test any of these because the goal of this research is to make sure no one is being cheated out of votes.

    Edit: Clarity
    MarsupilamiX likes this.
    03-28-15 11:36 PM
  18. CecilTsunami's Avatar
    Yes it was the space thing when you swipe up your email address. I typed it in from scratch and it worked!

    Posted via Passport  The Beast!
    Yep, that was my problem too.

    Posted via CB10
    MikeOWaterloo likes this.
    03-28-15 11:57 PM
  19. Zedd88's Avatar
    Check the extra space after your email address. There should be no extra space.

    Posted via CB10
    MikeOWaterloo likes this.
    03-29-15 12:00 AM
  20. Cortizo5's Avatar
    voted!
    03-29-15 01:44 AM
  21. BerryRipe's Avatar
    Followed the advice of backspacing after swiping my email and voted for the Passport using two emails.

    Posted via CB10
    03-29-15 01:51 AM
  22. hermeshidayat's Avatar
    Lol,whats one plus one?



    Sent via CB10 from my BlackBerryElite
    03-29-15 02:41 AM
  23. LateToTheGame's Avatar
    I get
    "This Poll is Private

    This page cannot be accessed because this poll is private."

    Guess I won't be voting then.
    03-29-15 04:21 AM
  24. seluje's Avatar
    Just voted from my Playbook
    03-29-15 10:17 AM
  25. David Theado's Avatar
    Just tried it and think I figured it out. If you swiped your email address up its adds a space and give you that message. If you delete the space after your swiped up address it will take it. At least it did for me.

    Posted via CB10
    This worked

    Posted via CB10
    ummie4 likes this.
    03-29-15 10:38 AM
43 12

Similar Threads

  1. Any one have the Stilgut Wallet case for the Classic
    By MGO in forum BlackBerry Classic
    Replies: 18
    Last Post: 03-01-16, 01:13 PM
  2. Passport, new or used?
    By BijnaNotHuman in forum BlackBerry Passport
    Replies: 25
    Last Post: 04-24-15, 07:17 PM
  3. BB10 App Manager (Chrome) Not Working on Passport
    By RLC3780 in forum BlackBerry Passport
    Replies: 7
    Last Post: 03-28-15, 11:11 PM
  4. Stylus on future passport devises
    By gilbert khayat in forum BlackBerry Passport
    Replies: 4
    Last Post: 03-28-15, 05:12 PM
LINK TO POST COPIED TO CLIPBOARD