4 ms·
Good find, though I don't think most of it is necessary. It seems like any username that includes a semicolon at any point will authenticate. I can't imagine
by FaceKicker 16y ago
Good find, though I don't think most of it is necessary.
It seems like any username that includes a semicolon at any point will authenticate. I can't imagine what their code would have to look like in order for that to happen.
- pavel_lishin 16y agoEspecially considering they're actually paying monthly for it. http://news.ycombinator.com/item?id=2330694 http://news.ycombinator.com/item?id=2330694