Other comments in this thread speculate about SQL-injection attacks, which are not a problem here because Hacker News doesn't use SQL. For interested readers, t

Other comments in this thread speculate about SQL-injection attacks, which are not a problem here because Hacker News doesn't use SQL. For interested readers, there was once a thread "How I Hacked Hacker News (with arc security advisory)" https://news.ycombinator.com/item?id=639976 https://news.ycombinator.com/item?id=639976 begun 1548 days ago, and that still makes interesting reading, although I'm sure the original vulnerability has been fixed.