3 ms·

Nice clean look. Just FYI, newlines aren't properly formatted in the output: a,b,"c c",d,e Also, what is the privacy policy as for data we paste into

by mholt 12y ago

Nice clean look. Just FYI, newlines aren't properly formatted in the output: a,b,"c c",d,e Also, what is the privacy policy as for data we paste into your site?

Mandatum 12y ago
Ok removed that. Privacy policy? Oh hi, I got yo pastes. EDIT: Yep, you can inject JS too. Apologies for the way I posted that, did make sure there was nothing personal on there (was mostly test data and people copy-pasting Wiki stuff).
- voltagex_ 12y ago
  Just a warning - that page is ~7MB and crashed Firefox for me. Still pretty sad the browser can be halted via zerg rush.
  - Mandatum 12y ago
    Yeah it goes on to list all pastes on the site and gives you the ability to edit, destroy or view them.
- heynk 12y ago
  Yeah, this was a very quick project and that slipped through. All fixed now. If people are interested I'd be happy to put due diligence in and put up a privacy policy! Edit: maybe I'm an idiot and can't repro the js injection, could you link me? http://copypastecsv.herokuapp.com/pastes/8279b342 http://copypastecsv.herokuapp.com/pastes/8279b342
  - dyscrete 12y ago
    To be honest, there is not much need for a CSV host as most would just use Google Docs. It's a cool tool for hackers though. EDIT: typos
    - nostromo 12y ago
      Couldn't you say the same thing about Gist/PasteBin? Last I checked those were pretty popular...
- dyscrete 12y ago
  I was about to mention the bad security of uploading personal documents to some guy's Heroku instance. Instead found this a very unprofessional and destructive way to handle a bug report, and possibly illegal[1]. The site's creator Hank Stoever has his public contact information available[2]. [1] http://www.huffingtonpost.com/2012/09/13/barrett-brown-arrested-fo_n_1881535.html http://www.huffingtonpost.com/2012/09/13/barrett-brown-arres... [2] http://hankstoever.com http://hankstoever.com EDIT: removed text wall and typos

by mholt 12y ago

Nice clean look. Just FYI, newlines aren't properly formatted in the output: a,b,"c c",d,e Also, what is the privacy policy as for data we paste into your site?

Mandatum 12y ago

Ok removed that. Privacy policy? Oh hi, I got yo pastes. EDIT: Yep, you can inject JS too. Apologies for the way I posted that, did make sure there was nothing personal on there (was mostly test data and people copy-pasting Wiki stuff).

voltagex_ 12y ago
Just a warning - that page is ~7MB and crashed Firefox for me. Still pretty sad the browser can be halted via zerg rush.
- Mandatum 12y ago
  Yeah it goes on to list all pastes on the site and gives you the ability to edit, destroy or view them.
heynk 12y ago
Yeah, this was a very quick project and that slipped through. All fixed now. If people are interested I'd be happy to put due diligence in and put up a privacy policy! Edit: maybe I'm an idiot and can't repro the js injection, could you link me? http://copypastecsv.herokuapp.com/pastes/8279b342 http://copypastecsv.herokuapp.com/pastes/8279b342
- dyscrete 12y ago
  To be honest, there is not much need for a CSV host as most would just use Google Docs. It's a cool tool for hackers though. EDIT: typos
  - nostromo 12y ago
    Couldn't you say the same thing about Gist/PasteBin? Last I checked those were pretty popular...
dyscrete 12y ago
I was about to mention the bad security of uploading personal documents to some guy's Heroku instance. Instead found this a very unprofessional and destructive way to handle a bug report, and possibly illegal[1]. The site's creator Hank Stoever has his public contact information available[2]. [1] http://www.huffingtonpost.com/2012/09/13/barrett-brown-arrested-fo_n_1881535.html http://www.huffingtonpost.com/2012/09/13/barrett-brown-arres... [2] http://hankstoever.com http://hankstoever.com EDIT: removed text wall and typos