3 ms·
"he's pressured Stephen & his webmaster to immediately fix this hole or risk a much worse attack on his site." Surely that's a good thing? I agree that Stephen
by lemming 17y ago
"he's pressured Stephen & his webmaster to immediately fix this hole or risk a much worse attack on his site."
Surely that's a good thing? I agree that Stephen would/will probably be offended (assuming he wasn't notified), but he'll certainly take security more seriously now.
- dandelany 17y agoIt's a good thing that Stephen was made aware of this security hole, but the author could have informed him a lot more effectively. If someone broke into my house and I found out about it on Hacker News because they set up a webcam in my living room, I suppose it would be a good thing that I found out about a security problem in my home, but I certainly wouldn't be happy about it.
- lemming 17y agoFair enough, although it's a much more graphic illustration of the problem actually seeing the results (rather than simply "your site isn't very secure", "your front door lock is a bit loose"). I know it made much more impact on me than it would have if I'd read an article about the possibility of it happening. Although I suspect that if he'd just mailed the username/password to Stephen that would have been example enough. Kind of scary how many of these sites are almost certainly out there, though.