4 ms·
tl;dr a friendly guy reported to tarsnap that you could sign up without needing the emailed confirmation link by creating that same confirmation link yourself
by glag0lit 11y ago
tl;dr
a friendly guy reported to tarsnap that you could sign up without needing the emailed confirmation link by creating that same confirmation link yourself with the cookie/token being hidden, but present in the HTML code.
also, there is no bug bounties for the tarsnap website, only for tarsnap code.
- cperciva 11y agoa friendly guy reported to tarsnap that you could sign up without needing the emailed confirmation link by creating that same confirmation link yourself with the cookie/token being hidden, but present in the HTML code. That's a decent summary, but I didn't think I was all that long-winded...
- djm_ 11y agoQuite the opposite, it's nice to see someone put some effort into their write-ups. It's so much more readable as a story.
- glag0lit 11y agoOh it really is just a summary, and no commentary as to whether TFA was long-winded or not. That's left to decide for each individually.
- w8rbt 11y agoWhen you write tl;dr followed by a very short summary, doesn't that itself imply that the article was long?
- tome 11y agoThe summary was certainly shorter than the article!
- slight 11y agotl;dr has also become a general shorthand for a summary.
- simcop2387 11y agoIt's almost an abbreviation for summary!
- ninguem2 11y agoMaybe the guy who found the bug won't get $1000, according to your rules, but he definitely deserves a cookie.
- monochromatic 11y agoPlease don't turn this place into a pun-fest.
- cperciva 11y agoI did pay out a bounty of $200 for this.