4 ms·

Thanks for that. I wasn't aware that this was a common practice. I assumed it must be something like that, but I wanted to make very sure I understood exactly

Thanks for that. I wasn't aware that this was a common practice. I assumed it must be something like that, but I wanted to make very sure I understood exactly. Don't want any hacker news stories about my sites! EDIT: Errr, at least, not this sort of story.

deleted 17y ago
[deleted]
DougBTX 17y ago
You can actually search for this vulnerability on Google Code Search, and it finds a few results that look exploitable. I don't know how to go about informing people with that code that their systems are vulnerable. Many are open source projects, so anyone using those tools are vulnerable too.
bricestacey 17y ago
It's a pretty common attack. I have several identical attempts against my website on a daily basis (can easily tell from the access logs).