Earlier quoted context omitted.
Like Pandora, he is so curious, he has to check this out. Slight error, Pandora was a female in greek mythology (well, the first female to be more precise)
I think the "he" is dfranke in this context.
How I Hacked Hacker News (with arc security advisory)
21–30 of 84 posts
Re: How I Hacked Hacker News (with arc security advisory)
#22Thanks to dfranke for giving us time to release a fix, and in fact writing part of it.
That hack was damned impressive for breadth and depth of knowledge, pretty rare in my experience.
Re: How I Hacked Hacker News (with arc security advisory)
#23Earlier quoted context omitted.
I was looking for login cookies, not fnids. Fnids are worthless since there's already code that checks that the user who called the closure is the same as the user for whom it was created.
My mistake. So you can get a valid login, but you can't know whom you'll be login in as, that is without doing some social engineering like with the irc example. Impressive hack.
Re: How I Hacked Hacker News (with arc security advisory)
#24(plus having the ethics to actually do no evil - great combination)
Re: How I Hacked Hacker News (with arc security advisory)
#25That's the difference between a true hacker at heart and someone who just stumbles across something. Tenacity.
Re: How I Hacked Hacker News (with arc security advisory)
#26Earlier quoted context omitted.
My mistake. So you can get a valid login, but you can't know whom you'll be login in as, that is without doing some social engineering like with the irc example. Impressive hack.
i think if you get a valid login cookie, and use it, it will tell you what account you have in the top right.
Re: How I Hacked Hacker News (with arc security advisory)
#27This is pretty interesting stuff, but man it would have been nice if you were able to post it somewhere with actual HTML formatting. The gray on gray is tough after a full screen or two.
Ctrl-A, Ctrl-C, Alt-Tab, Ctrl-V
Re: How I Hacked Hacker News (with arc security advisory)
#28Fellow hackers, take note. This is how you solve a problem! dfranke is Pandora, a rat in a maze, Sherlock Holmes, General Sherman, William Randolph Hearst, and your father all wrapped in one. Like Pandora, he is so curious, he has to check this out. Like a rat in a maze, he keeps going looking for the clear path. Like Sherlock Holmes, he applies logic to determine the next step. Like General Sherman, he keeps marchin…
Like Pandora, he is so curious, he has to check this out. Slight error, Pandora was a female in greek mythology (well, the first female to be more precise)
Pandora was the wife of Prometheus (the Titan of Knowledge) who made all the animals and humanity (last of all and out of the only material he had left - clay). In order to give them life, he stole fire from the gods and gave it to his creations, for which he was bitterly punised. In one telling he was tied to a mountain and his heart/liver was eaten by an eagle/vulture and grew back every day. HOWEVER, in another telling, his punishment was PANDORA and her famous box.... I just always found that interesting, vivisection every day for eternity, or a curious wife... fine lines =P
Re: How I Hacked Hacker News (with arc security advisory)
#29Fellow hackers, take note. This is how you solve a problem! dfranke is Pandora, a rat in a maze, Sherlock Holmes, General Sherman, William Randolph Hearst, and your father all wrapped in one. Like Pandora, he is so curious, he has to check this out. Like a rat in a maze, he keeps going looking for the clear path. Like Sherlock Holmes, he applies logic to determine the next step. Like General Sherman, he keeps marchin…