4 ms·
Wait... What the??? Quote "BitGrail lost $170 million worth of Nano XRB tokens because... the checks for whether you had a sufficient balance to withdraw were
by bouncycastle 8y ago
Wait... What the???
Quote "BitGrail lost $170 million worth of Nano XRB tokens because... the checks for whether you had a sufficient balance to withdraw were only implemented as client-side JavaScript "
- londons_explore 8y ago"top men"
- tyingq 8y agoI remember a number of early e-commerce sites that put item prices in HTML forms. So craft your own POST, and name your own price.
- mtmail 8y agoRecently seen the price listed/editable in the URL on a checkout form page.
- bouncycastle 8y agoYes, seen this once before, where the shipping price was calculated client side, then sent to the server with no validation. You could craft a request with a negative value and get the price down to a cent for the entire cart! At least in e-commerce, you can always send an email to the customer explaining the mistake, and cancel the order...