Show HN: A Way To Hack HN's Karma

#1

Post by GreekOphion » Fri, Mar 23, 2012, 12:08 AM UTC

I submitted a link, when someone clicks on it I get an up-vote for this article.

I don't want people to misuse this I just want to bring attention to this problem.

This is the link I used that up-votes this: http://news.ycombinator.com/vote?for=3742742&dir=up&...

Re: Show HN: A Way To Hack HN's Karma

#2

Post by RandallBrown » Fri, Mar 23, 2012, 12:15 AM UTC

What is the link?

Re: Show HN: A Way To Hack HN's Karma

#3

Post by [deleted] » Fri, Mar 23, 2012, 12:16 AM UTC

RandallBrown wrote: post #2

What is the link?

[deleted]

Re: Show HN: A Way To Hack HN's Karma

#4

Post by [deleted] » Fri, Mar 23, 2012, 12:19 AM UTC

[deleted]

Re: Show HN: A Way To Hack HN's Karma

#5

Post by azelfrath » Fri, Mar 23, 2012, 12:20 AM UTC

[deleted] wrote: post #4

[deleted]

I don't think this is irresponsible, exactly. Mischievous, yes, but there's not a ton of damage being done and it's something we can laugh at and say "Hey, that was pretty good."

Re: Show HN: A Way To Hack HN's Karma

#6

Post by GreekOphion » Fri, Mar 23, 2012, 12:22 AM UTC

RandallBrown wrote: post #2

What is the link?

If you go to this submission and click it, it up-votes this: http://news.ycombinator.com/item?id=3742745

Re: Show HN: A Way To Hack HN's Karma

#7

Post by carbocation » Fri, Mar 23, 2012, 12:27 AM UTC

PG could start using POST & CSRF protection to lock this down. Or we could just avoid doing this to each other.

Re: Show HN: A Way To Hack HN's Karma

#8

Post by [deleted] » Fri, Mar 23, 2012, 12:27 AM UTC

azelfrath wrote: post #5

[deleted] wrote: post #4

[deleted]

I don't think this is irresponsible, exactly. Mischievous, yes, but there's not a ton of damage being done and it's something we can laugh at and say "Hey, that was pretty good."

[deleted]

Re: Show HN: A Way To Hack HN's Karma

#9

Post by ccarpenterg » Fri, Mar 23, 2012, 12:29 AM UTC

Nice hack! We should call it 'Same-site request forgery'.

Re: Show HN: A Way To Hack HN's Karma

#10

Post by staunch » Fri, Mar 23, 2012, 12:29 AM UTC

I saw this but don't really consider it much of a problem. It's the kind of thing that you can't really exploit. It'd be obvious if you really tried to use it for evil and then PG would kill your account.