3 ms·

This is just such an amateur hour vulnerability. Gluing strings together with no regard to what might be in them and then parsing them later... edit: I didn't

This is just such an amateur hour vulnerability. Gluing strings together with no regard to what might be in them and then parsing them later... edit: I didn't mean it as a put-down of either the article or how they found the vulnerability, but it wasn't a constructive comment either way.

dang 6mo ago
It's good to add information about what the vulnerability actually was, but please don't do it in the key of putdown. We're trying for something else here. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html