Live data from Hacker News

Using Goatse to Stop App Theft

joshcsimmons.com

41–50 of 464 posts

Re: Using Goatse to Stop App Theft

#42

Earlier quoted context omitted.

I saw it the first time as a kid. My friends and I tried to trick each other to see it too. I'm fine. We're fine.

You can't unsee it. You know exactly what it looks like. It etches into long-term memory like a scar that never fades.

Haha yes. We even found a magic eye/autostereogram of goatse once. Was pretty epic.

"Hey come check out this amazing magic eye". Boom!

Re: Using Goatse to Stop App Theft

#43

This is hilarious, but I think the most mature thing to do would have been to detect if the site is inside an iframe and if so add a polite link saying "click here to go to sqword.com and play this game ad free".

The author said he’s not mature.

His approach is much awesomer than the nature thing.

Re: Using Goatse to Stop App Theft

#44

Earlier quoted context omitted.

I saw it the first time as a kid. My friends and I tried to trick each other to see it too. I'm fine. We're fine.

You can't unsee it. You know exactly what it looks like. It etches into long-term memory like a scar that never fades.

That’s half the fun. The other half is what the OP did.

Re: Using Goatse to Stop App Theft

#45

Earlier quoted context omitted.

> This blog is now STATELESS. The entire post is contained in the URL that you are visiting now. All my "blog" is now is a hard-coded main page that contains links to posts I claim authorship of. Of course the entire post is contained in each of these links. https://joshcsimmons.com/post/H4sIAAAAAAAA%2F3xV227cRgx911cQ...

doesn't this mean I could embed salacious material into a link and fool people into thinking the person who owned this website wrote it?

XSS as a feature, neat

Re: Using Goatse to Stop App Theft

#46

Your website has the worst permalinks ever.

> This blog is now STATELESS. The entire post is contained in the URL that you are visiting now. All my "blog" is now is a hard-coded main page that contains links to posts I claim authorship of. Of course the entire post is contained in each of these links. https://joshcsimmons.com/post/H4sIAAAAAAAA%2F3xV227cRgx911cQ...

[deleted]

Re: Using Goatse to Stop App Theft

#47

There’s an HTTP header you can add that prevents a page being in an iframe, but go off, king.

Just so anyone searching this thread is aware, "Content-Security-Policy:... frame-ancestors 'none';" is what you are (I think) referring to.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co...

Re: Using Goatse to Stop App Theft

#50
Ah, I had a similar idea. There were too many bots or vulnerability scanners hitting /wp-admin.php on my blog. It was flooding my access logs with 404s because I don't rock wordpress. Irksome stuff.

So I threw up a little 'surprise' for the ahem penetration testers ahem, if you feel brave: https://www.thran.uk/wp-login.php

Post reply on HN