Don't show this one to grandma: http://payment.neocities.org/
NeoCities
91–100 of 222 posts
Re: NeoCities
#92I love the browser editor you made. Very easy to get up and running fast. It'll be a useful tool for teaching, and also for small js projects. Fun project- Thanks!
Re: NeoCities
#93It's never too early for scams. http://secure.neocities.org/ "Security page. Please enter your password here."
I see login.neocities.org is taken as well.
Re: NeoCities
#94Decided to create something from scratch in the text editor. I must say I like the editor. Had to include a slight ode to the fallen geo(.*)
Re: NeoCities
#95GeoCities clipart backgrounds still available!
Re: NeoCities
#96Oh man, it is just like the 90's: unicode usernames are not allowed. Welcome to the past!
I can't even put a unicode bullet on the page. Maybe I should be using double tildes or something.
Re: NeoCities
#97Don't use this for anything you view as important. I just checked and there is no collision detection for usernames. You can signup for an account using any name and your account will seemingly just replace the previous created account. That is a big enough and obvious enough flaw that it also makes we wonder if this is just a phishing expedition or a way to mine email addresses.
I just fixed it. It was a change I did last night to fix a save bug. My apologies about that, it wasn't a good bug, but hopefully it's the last security-related one. Probably goes without saying, but this is definitely a beta project. I'm doing a lot of other things to protect this kind of attack (filename scrubbing, bcrypt passwords), so I'm pretty red in the face about how dumb this one was. If you find any other b…
You are right, I should have reached out to you directly with this issue. I took the easy route and didn't put in any effort to track you down, for that I am sorry. However, I take exception to you categorizing my post as "trashing other people's work."
I feel that I also have a responsibility to publicize such a glaring security hole in your site. This is the number 1 link on HN at the moment. Thousands of people are going to be signing up. I think they have the right to know that a bug like this exists. Like I said in my initial post, a bug this big seemed to be a sign of a bigger problems. I had suspicions the site was malicious and at that point my priority was to point out those suspicions to the HN community.
Re: NeoCities
#98Reading the comments you can see instant cybersquatting.
Man i hate that -.-
Re: NeoCities
#99Earlier quoted context omitted.
I just fixed it. It was a change I did last night to fix a save bug. My apologies about that, it wasn't a good bug, but hopefully it's the last security-related one. Probably goes without saying, but this is definitely a beta project. I'm doing a lot of other things to protect this kind of attack (filename scrubbing, bcrypt passwords), so I'm pretty red in the face about how dumb this one was. If you find any other b…
You are right, I should have reached out to you directly with this issue. I took the easy route and didn't put in any effort to track you down, for that I am sorry. However, I take exception to you categorizing my post as "trashing other people's work." I feel that I also have a responsibility to publicize such a glaring security hole in your site. This is the number 1 link on HN at the moment. Thousands of people ar…
That wasn't directed at you, it was a general comment. I was referring to the person(s) that defaced other people's sites. Sorry if it came off any other way. :)
Re: NeoCities
#100Earlier quoted context omitted.
Does Nginx use sendfile under the hood or is it something you would use separately?
It's an option you can choose at compilation time, I believe.
It's a configuration option, actually [1]. No need to recompile. If anyone isn't using it, try it out!