Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

If you’re trying to hack/deface a website, don’t submit a pull request

github.com

Post reply on HN
Print view View original

71–80 of 114 posts

Re: If you’re trying to hack/deface a website, don’t submit a pull request

#73

Post by stevewillows »

RyanZAG wrote: post #46

For anybody too lazy to read through them all, here are some gems: + Are you sure, like, really really sure, you want JavaScript 1.2? +var speed=1 please run jslint on your code before submitting a pull request There are so many errors that JSLint gives up on this code at 39%. +temp=document.body.scrollTop You really shouldn't declare a variable without using var - can lead to all sorts of scoping problems. Oh, good…

That email account is locked temporarily -- seems like everyone was trying to get in :)

Re: If you’re trying to hack/deface a website, don’t submit a pull request

#74

Post by xanadohnt »

geekgirlweb wrote: post #24

Trying to hack a non-profit site? An non-affiliated NFP? Someone did not love this person as a child. Please report? https://github.com/ahmedalex P.S. If you're not a jerk and would love to help with the new CoderDojo.com site, let me know rebecca (at) coderdojo.com

But it's PHP. sigh

Re: If you’re trying to hack/deface a website, don’t submit a pull request

#75

Post by frogpelt »

RyanZAG wrote: post #55
mseebach wrote: post #50

Earlier quoted context omitted.

What message? I read through the thing and didn't see any message. There's some encoded arabic, but even if I could read arabic, I couldn't read it encoded.

There is actually a message: "If there is no check on the freedom of your words, then let your hearts be open to the freedom of our actions" "The war continues until the last Zionist remains on the beloved land of Palestine" cough Shouldn't that be until there are no more Zionists in Palestine? Are they proposing to kill all Zionists until there is just one of them left, and then say "you're the last one here, you ca…

It never fails to cease to amaze me when people people mix up these type of statements.

Re: If you’re trying to hack/deface a website, don’t submit a pull request

#76

Post by Zarel »

hdra wrote: post #60

I can't understand how did someone capable of understanding and doing a git pull request can produce this kind of "code". Or how did he think that he can pull this thing off? is there a "10 ways to hack a website" where a git pull is one of them? The fact that there is a code snipped a tutorial on "How to Create a Website With Notepad" and the whole thing seems like it came out from an old WYSIWYG editor, the thing o…

Github makes a lot of things really easy. I'm guessing he just used the "edit" button while viewing a file in Github, which will make Github automatically fork, commmit, and submit a pull request.

Re: If you’re trying to hack/deface a website, don’t submit a pull request

#77

Post by mratzloff »

geekgirlweb wrote: post #24

Trying to hack a non-profit site? An non-affiliated NFP? Someone did not love this person as a child. Please report? https://github.com/ahmedalex P.S. If you're not a jerk and would love to help with the new CoderDojo.com site, let me know rebecca (at) coderdojo.com

Didn't know you could report a GitHub user for abuse until today. Just did.

Re: If you’re trying to hack/deface a website, don’t submit a pull request

#78

Post by mastofact »

schrodinger wrote: post #32
mastofact wrote: post #11

Earlier quoted context omitted.

I'm more shocked that they even allow images to be embedded in comments.

You guys are a bunch of cranky pants

I'm just tired of seeing memes on places of "serious business," as bti points out.

Re: If you’re trying to hack/deface a website, don’t submit a pull request

#79

Post by user24 »

gioele wrote: post #70
user24 wrote: post #43

Earlier quoted context omitted.

Something similar to this was attempted with the Linux kernel once: https://freedom-to-tinker.com/blog/felten/linux-backdoor-att... I say similar because it was not a trusted contributor going rogue but someone actually hacking the public CVS repo.

It is claimed that it also happened to the OpenBSD crypto code: marc.info/?l=openbsd-tech&m=129236621626462&w=2 (a bit of analysis on the story: https://threatpost.com/en_us/blogs/experts-openbsd-backdoor-... ). Long story short. The FBI put on its payroll a well paid crypto analyst trusted with commit access to the OpenBSD code. Years after that, somebody claims that the analyst has put on the FBI payroll to implant…

Someone should write a book about that, it's a great conspiracy theory. Reminds me of Robert Harris - The Ghost in a way.
Post reply on HN