This site is subject to severe XSS via the post mechanism. Just entering alert(1) works. So be careful when going to links. See https://hacker.thoughts.page for a demo
Have you reported this to the creator? Their email is in a couple of places.
Thoughts.page: hosting a small webpage for your thoughts
31–40 of 111 posts
Re: Thoughts.page: hosting a small webpage for your thoughts
#32This site is subject to severe XSS via the post mechanism. Just entering alert(1) works. So be careful when going to links. See https://hacker.thoughts.page for a demo
oh boy! well done for spotting that
Re: Thoughts.page: hosting a small webpage for your thoughts
#33This site is subject to severe XSS via the post mechanism. Just entering alert(1) works. So be careful when going to links. See https://hacker.thoughts.page for a demo
Oh boy. Didn't think I'd see something like this in $CURRENT_YEAR.
I didn't either until I started my current job back in April and found them in a frenzy trying to firstly figure out what XSS is and secondly trying to patch all their systems before the end of the month. Fun times.
Re: Thoughts.page: hosting a small webpage for your thoughts
#34Earlier quoted context omitted.
Yeah it's an interesting model. I'm guessing it works on an honour system as income isn't easily verifiable
In Norway, everyone's income is public information. Other countries could do the same to make things more transparent.
It used to be public; the news papers had databases where you could look up individuals or list by location/birthyear/gender. Some even made maps, but they were a bit unpopular as it was suspected to be used by criminals. But knowing what politicians earned was nice and important, and news papers still report on "people of public interest"
Today, you have to login online and the person you look up can see your name in the log
Re: Thoughts.page: hosting a small webpage for your thoughts
#35This site is subject to severe XSS via the post mechanism. Just entering alert(1) works. So be careful when going to links. See https://hacker.thoughts.page for a demo
Plus there's no "nofollow" on links, doors opened for spammers!
Re: Thoughts.page: hosting a small webpage for your thoughts
#36Slightly off-topic, but I've noticed that the ToS is based on http://wordpress.com/tos which is licensed under CC. I wonder if it's safe to use and anyone else uses it with "success".
I used it at a previous startup which got up to 1MM ARR. It’s pretty great that it exists.
Re: Thoughts.page: hosting a small webpage for your thoughts
#37I wish there were kind of a Twitter where people would just post their thoughts (even those controversial), there would be no marketing of any kind, no personality and no flame wars. And all the posts would be organized by subjects.
Re: Thoughts.page: hosting a small webpage for your thoughts
#38I really love the pricing model, refreshing: > thoughts.page is free for anyone who makes less than $40,000 USD/year, and costs $5/month otherwise.
It's a shame because its pricing structure works like how many people misunderstand taxes to work. If you earn $39,990/year and then get a $30/year raise, then you'll actually be set back to $39,960/year after you pay the new price for this service. You might have to awkwardly explain to your boss that you don't want that $0.015/hour raise. If instead the service worked like taxes by charging a percent of the money y…
From the pricing page:
it obviously isn't perfect — there are people making more than $40,000/year for whom $5/month is an undue burden, and there are people making less than $40,000/year who can easily afford $5/month. but it's not like i'm checking, it's basically pay-what-you-want with $40,000 as a suggested cutoff for paying.
Re: Thoughts.page: hosting a small webpage for your thoughts
#39Earlier quoted context omitted.
In Norway, everyone's income is public information. Other countries could do the same to make things more transparent.
It used to be public; the news papers had databases where you could look up individuals or list by location/birthyear/gender. Some even made maps, but they were a bit unpopular as it was suspected to be used by criminals. But knowing what politicians earned was nice and important, and news papers still report on "people of public interest" Today, you have to login online and the person you look up can see your name i…
> Today, you have to login online and the person you look up can see your name in the log
I really don't see a problem with that and would still consider it public information.
Re: Thoughts.page: hosting a small webpage for your thoughts
#40I wish there were kind of a Twitter where people would just post their thoughts (even those controversial), there would be no marketing of any kind, no personality and no flame wars. And all the posts would be organized by subjects.
A blog?