Live data from Hacker News

Asteroids JavaScript Bookmarklet to blow up any web site

erkie.github.com

51–60 of 77 posts

Re: Asteroids JavaScript Bookmarklet to blow up any web site

#56
post #7

Awesome. Now someone needs to combine it with websockets/node.js (or similar) so I can see the other players on the same page!

Exactly what you wanted: http://realitymachine.net/asteroids.html

And the HN article, if you want to drum up some more players: http://news.ycombinator.com/item?id=1738543

I hacked together a very (very) basic multiplayer with a paper-thin node.js server in coffeescript.

Yes, really: http://github.com/cushman/asteroids.js

It might deserve a newspost of its own, but I'd like to have a working server running so people can actually, you know, use it. Unfortunately, I haven't thought to get node running on my VPS before now, and it's almost 02:00 here...

Re: Asteroids JavaScript Bookmarklet to blow up any web site

#57
post #15

what an awesome stress reliever. now i can get points for destroying facebook.

Protip for the paranoid: the author could nab your session cookie at the same time, too! :)

Heh, yeah, when I saw it earlier I wondered how successfully people could use an approach like this to social engineer people in such a manner. Glad I'm not the only paranoid one. :)

Re: Asteroids JavaScript Bookmarklet to blow up any web site

#58
post #55
post #15

Earlier quoted context omitted.

Protip for the paranoid: the author could nab your session cookie at the same time, too! :)

Use HttpOnly on critical cookies!

Okay, sure. :)

A new protip for the paranoid: the author could phish the snot out of you with an overlay that made it look like Facebook needed a re-login, too!

Re: Asteroids JavaScript Bookmarklet to blow up any web site

#59
post #58
post #55

Earlier quoted context omitted.

Use HttpOnly on critical cookies!

Okay, sure. :) A new protip for the paranoid: the author could phish the snot out of you with an overlay that made it look like Facebook needed a re-login, too!

Use Secure Login for Firefox! https://addons.mozilla.org/firefox/addon/4429

(lol, seriously though, it highlights "real" login fields based on domain for the page/frame which can't be spoofed and does a one-click login rather than typing it in - you can't get "fooled" because you should never be typing anything)

Post reply on HN