6 ms·

I used to be unhappy about this app until I found an SQL injection vulnerability that allowed me to log in and access the accounts of my previous dates by only

I used to be unhappy about this app until I found an SQL injection vulnerability that allowed me to log in and access the accounts of my previous dates by only needing to know their email addresses. This meant I was able to manipulate the ratings and comments people had made about me. Now I like the app :) Thanks Lulu!

shanelja 14y ago
Be careful with your trivial SQL injection, if the US police find out, that's 60 years behind bars, no access to a computer and daily "fun" in the shower.
- hyperbovine 14y ago
  But, no sexist gossip.
  - esquilax 14y ago
    You're not thinking like an entrepreneur. That just means that prison rape victims are an untapped* market. *badoom, pish!
    - 3825 14y ago
      I find it absolutely despicable to make light of violent abuse, including sexual abuse, in prison. We should be doing all we can to make our prisons safer for everyone. The fact that many people think it is OK to make and laugh at prison rape jokes sickens me. What would you think if I made rape jokes about your 90 year old grandma? Or your ten year old son? Or your wife? If that is not ok, neither is prison rape of adult men. I am appalled to realize many people think prison rape is part and parcel of the "prison experience". Should rape be used as a deterrent to unwanted behavior? Where do we stop? Will you be ok with teachers turning a blind eye on students raping other students in detention for not doing their homework or for misbehaving in the classroom? Answer me.
      - shanelja 14y ago
        This being said, I would like to point out that I also made light of violent, sexual abuse in prison in the grandparent post - I deserve the downvotes too.
      - hnriot 14y ago
        Do you live in the real world? Prisons aren't safe because they are full of violent offenders! It's pretty obvious that when you densely pack the bottom tier of society into small spaces that the outcome will be a whole load of violence - of all forms, rape (which is about power and control), gangs (which is core to the human species), fights and murder.
        3825 14y ago
        Sorry, I have never been to prison so I don't really know. The statistics I read boggles my mind. What can we do to help deter prisoner abuse?
        AnthonyMouse 14y ago
        >What can we do to help deter prisoner abuse? #1 on the list would be to stop sending so many people to prison, one way or another. Then you can afford to spend more resources per capita to better rehabilitate/reform/etc. the smaller number of inmates that remain.
      - esquilax 14y ago
        I don't think prison rape is OK. But my jokes aren't going to change that. Your sanctimonious bullcrap isn't either.
        3825 14y ago
        I apologize for my rudeness. It was uncalled for and I really didn't mean it that way. I didn't mean to target you or put you on the spot. I understand that reforming people's views takes time. (I visited a freshman class in a South Asian university. If I was from there I presume I'd most likely think that cat calling women as they entered the classroom was normal and acceptable behavior. I think we have a similar problem here. We've grown up with these jokes and lived with them for so long that it just doesn't bother us. I am glad you agree that prison rape is not OK. I am not trying to be sanctimonious (I actually had to look up that word). I just feel so helpless about this situation.
StavrosK 14y ago
As the former CTO of that company, I really doubt this. When I was there, the app was built on Django, and I left some pretty competent people behind, so I'm quite sure they wouldn't have made a mistake so rudimentary. However, I don't know what happened after I left, so there might have been some dubious decisions.
- peterkelly 14y ago
  It was a joke BTW ;)
  - shardling 14y ago
    No, it was an attempt at a joke. :P
    - deleted 14y ago
      [deleted]
  - Blockhead 14y ago
    Oops, thought I clicked on HN... How'd I end up on Reddit?
    - agilescale 14y ago
      The fact that this wasn't about the latest Javascript light framework didn't tip you off?
  - hnriot 14y ago
    A failed attempt.
- shanelja 14y ago
  Facebook and Google have to do a lot of penetration tests to keep their security in tip-top shape, sure, they have a much larger attack vector in terms of code but my point is there: Where there is public facing code, there is vulnerability. Regardless of if you are built on Django, CodeIgniter, Rails or super-secret-obfuscated-language-mark-two, no application is bullet proof and it would be trivial for any highly skilled security tester to interface this way with your database.

shanelja 14y ago

Be careful with your trivial SQL injection, if the US police find out, that's 60 years behind bars, no access to a computer and daily "fun" in the shower.

hyperbovine 14y ago
But, no sexist gossip.
- esquilax 14y ago
  You're not thinking like an entrepreneur. That just means that prison rape victims are an untapped* market. *badoom, pish!
  - 3825 14y ago
    I find it absolutely despicable to make light of violent abuse, including sexual abuse, in prison. We should be doing all we can to make our prisons safer for everyone. The fact that many people think it is OK to make and laugh at prison rape jokes sickens me. What would you think if I made rape jokes about your 90 year old grandma? Or your ten year old son? Or your wife? If that is not ok, neither is prison rape of adult men. I am appalled to realize many people think prison rape is part and parcel of the "prison experience". Should rape be used as a deterrent to unwanted behavior? Where do we stop? Will you be ok with teachers turning a blind eye on students raping other students in detention for not doing their homework or for misbehaving in the classroom? Answer me.
    - shanelja 14y ago
      This being said, I would like to point out that I also made light of violent, sexual abuse in prison in the grandparent post - I deserve the downvotes too.
    - hnriot 14y ago
      Do you live in the real world? Prisons aren't safe because they are full of violent offenders! It's pretty obvious that when you densely pack the bottom tier of society into small spaces that the outcome will be a whole load of violence - of all forms, rape (which is about power and control), gangs (which is core to the human species), fights and murder.
      - 3825 14y ago
        Sorry, I have never been to prison so I don't really know. The statistics I read boggles my mind. What can we do to help deter prisoner abuse?
        AnthonyMouse 14y ago
        >What can we do to help deter prisoner abuse? #1 on the list would be to stop sending so many people to prison, one way or another. Then you can afford to spend more resources per capita to better rehabilitate/reform/etc. the smaller number of inmates that remain.
    - esquilax 14y ago
      I don't think prison rape is OK. But my jokes aren't going to change that. Your sanctimonious bullcrap isn't either.
      - 3825 14y ago
        I apologize for my rudeness. It was uncalled for and I really didn't mean it that way. I didn't mean to target you or put you on the spot. I understand that reforming people's views takes time. (I visited a freshman class in a South Asian university. If I was from there I presume I'd most likely think that cat calling women as they entered the classroom was normal and acceptable behavior. I think we have a similar problem here. We've grown up with these jokes and lived with them for so long that it just doesn't bother us. I am glad you agree that prison rape is not OK. I am not trying to be sanctimonious (I actually had to look up that word). I just feel so helpless about this situation.

StavrosK 14y ago

As the former CTO of that company, I really doubt this. When I was there, the app was built on Django, and I left some pretty competent people behind, so I'm quite sure they wouldn't have made a mistake so rudimentary. However, I don't know what happened after I left, so there might have been some dubious decisions.

peterkelly 14y ago
It was a joke BTW ;)
- shardling 14y ago
  No, it was an attempt at a joke. :P
  - deleted 14y ago
    [deleted]
- Blockhead 14y ago
  Oops, thought I clicked on HN... How'd I end up on Reddit?
  - agilescale 14y ago
    The fact that this wasn't about the latest Javascript light framework didn't tip you off?
- hnriot 14y ago
  A failed attempt.
shanelja 14y ago
Facebook and Google have to do a lot of penetration tests to keep their security in tip-top shape, sure, they have a much larger attack vector in terms of code but my point is there: Where there is public facing code, there is vulnerability. Regardless of if you are built on Django, CodeIgniter, Rails or super-secret-obfuscated-language-mark-two, no application is bullet proof and it would be trivial for any highly skilled security tester to interface this way with your database.