4 ms·
Fine, you guys asked for it. https://news.ycombinator.com/item?id=259458 https://news.ycombinator.com/item?id=259458 https://news.ycombinator.com/item?id=3859
by dguido 14y ago
Fine, you guys asked for it.
https://news.ycombinator.com/item?id=259458 https://news.ycombinator.com/item?id=259458
https://news.ycombinator.com/item?id=3859853 https://news.ycombinator.com/item?id=3859853
https://news.ycombinator.com/item?id=1674911 https://news.ycombinator.com/item?id=1674911
https://news.ycombinator.com/item?id=301296 https://news.ycombinator.com/item?id=301296
https://news.ycombinator.com/item?id=4619344 https://news.ycombinator.com/item?id=4619344
People that exploit these kinds of things continue to innovate, but HN seems to be stuck with XSS, SQLi, and malformed XML.
- daeken 14y agoWhile I'm all with you on talking about advanced security, the reality is that most people here don't understand basic security. I think talking about the low-hanging fruit is important -- everyone has to start somewhere. And as always, if you want to see more advanced security stuff, post it! I'll upvote it for sure. Edit: This does make me think that I've been meaning to write a blog post about a security issue I discovered for about 6 months now. Time to do that.
- wglb 14y agoWhich he did: http://news.ycombinator.com/item?id=4678309 http://news.ycombinator.com/item?id=4678309. This is a tale in which cody pretty much ends up owning ccbill.
- ezequiel-garzon 14y agoPlease consider that none of those posts with any comments in them took place within the last two years. And "sadly" gets created just to tell people to read more books. Sad indeed... EDIT: HN seems to be stuck with XSS, SQLi, and malformed XML HN is not a person: half of today's HN didn't exist two years ago [1]. [1] http://blog.rjmetrics.com/surprising-hacker-news-data-analysis/ http://blog.rjmetrics.com/surprising-hacker-news-data-analys...