[dead]
Show HN: Draw a fish and watch it swim with the others
241–247 of 247 posts
Re: Show HN: Draw a fish and watch it swim with the others
#242Cool
Re: Show HN: Draw a fish and watch it swim with the others
#243It looks like this has been hijacked by some edgy online communities.
Is there some sort of overlap between HN and cesspits like 4chan? Or did this get posted elsewhere?
Re: Show HN: Draw a fish and watch it swim with the others
#244It looks like this has been hijacked by some edgy online communities. Is there some sort of overlap between HN and cesspits like 4chan? Or did this get posted elsewhere?
Unfortunately got posted to some heinous websites... and I made the mistake of using a very simple username and password that's been leaked 100 times for my admin account. I was going to "change it later"...
Anyway, working on the rollback now. A nice guy from here reached out and reported some small vulns I involuntarily committed.
Re: Show HN: Draw a fish and watch it swim with the others
#245Earlier quoted context omitted.
To be fair, everything on the client is raw string interpolation. It's only secure if you comprehensively vet everything once it's on the server.
That's absolutely not true. Sanitization on the client is significantly safer, because the client knows how it parses HTML, while the server can, at best, guess (and hope it follows the spec). When you set element.textContent = someUserGeneratedContent, the browser guarantees that the user-generated content will never be parsed as HTML. response.write(" " + sanitize(someUserGeneratedContent) + " ") has no such guaran…
That's not sanitisation, that's separating data from executable code. It's a better solution when possible, but the solution suggested above also works
Re: Show HN: Draw a fish and watch it swim with the others
#246The leaderboard is fascinating. Some people are clearly putting a lot of time into this, while the rest of us are trying to sneak phallic shapes past your CNN. 1. https://drawafish.com/rank.html?userId=1753510318634_cdeh6a4...
I could dedicate a month, or a year, and never come up with something like those. Are they really using the site tool, or is there a trick to draw them elsewhere and import them? Those are truly amazing!
Pretty sure you can build a "robot" that just copies from an image source.
Re: Show HN: Draw a fish and watch it swim with the others
#247It's so interesting. A large number of strange fish are swimming around.