Live data from Hacker News

How I Hacked Hacker News (with arc security advisory)

news.ycombinator.com

21–30 of 84 posts

Re: How I Hacked Hacker News (with arc security advisory)

#21
post #16

Earlier quoted context omitted.

Like Pandora, he is so curious, he has to check this out. Slight error, Pandora was a female in greek mythology (well, the first female to be more precise)

I think the "he" is dfranke in this context.

Yeah, but I looked through the rest of the list and the rest of the examples could have referred to the male context, so I simply was just making sure.

Re: How I Hacked Hacker News (with arc security advisory)

#23
post #20
post #15

Earlier quoted context omitted.

I was looking for login cookies, not fnids. Fnids are worthless since there's already code that checks that the user who called the closure is the same as the user for whom it was created.

My mistake. So you can get a valid login, but you can't know whom you'll be login in as, that is without doing some social engineering like with the irc example. Impressive hack.

i think if you get a valid login cookie, and use it, it will tell you what account you have in the top right.

Re: How I Hacked Hacker News (with arc security advisory)

#25
Great work and writeup. I think my favorite part of the whole thing is that you clearly started with the goal (or somewhere early on decided that was the goal) of finding a bug and kept going until you'd landed it.

That's the difference between a true hacker at heart and someone who just stumbles across something. Tenacity.

Re: How I Hacked Hacker News (with arc security advisory)

#26
post #20

Earlier quoted context omitted.

My mistake. So you can get a valid login, but you can't know whom you'll be login in as, that is without doing some social engineering like with the irc example. Impressive hack.

i think if you get a valid login cookie, and use it, it will tell you what account you have in the top right.

Well obviously, but you couldn't do a brute force attack like this to a specific account.

Re: How I Hacked Hacker News (with arc security advisory)

#27
post #12
post #4

This is pretty interesting stuff, but man it would have been nice if you were able to post it somewhere with actual HTML formatting. The gray on gray is tough after a full screen or two.

Ctrl-A, Ctrl-C, Alt-Tab, Ctrl-V

Yeah, that's what I do right now. I'm just saying after a certain point, a post becomes a blog posting.

Re: How I Hacked Hacker News (with arc security advisory)

#28
post #16
post #11

Fellow hackers, take note. This is how you solve a problem! dfranke is Pandora, a rat in a maze, Sherlock Holmes, General Sherman, William Randolph Hearst, and your father all wrapped in one. Like Pandora, he is so curious, he has to check this out. Like a rat in a maze, he keeps going looking for the clear path. Like Sherlock Holmes, he applies logic to determine the next step. Like General Sherman, he keeps marchin…

Like Pandora, he is so curious, he has to check this out. Slight error, Pandora was a female in greek mythology (well, the first female to be more precise)

most people don't know this and in the interest of knowledge I thought I'd point it out:

Pandora was the wife of Prometheus (the Titan of Knowledge) who made all the animals and humanity (last of all and out of the only material he had left - clay). In order to give them life, he stole fire from the gods and gave it to his creations, for which he was bitterly punised. In one telling he was tied to a mountain and his heart/liver was eaten by an eagle/vulture and grew back every day. HOWEVER, in another telling, his punishment was PANDORA and her famous box.... I just always found that interesting, vivisection every day for eternity, or a curious wife... fine lines =P

Re: How I Hacked Hacker News (with arc security advisory)

#29
post #11

Fellow hackers, take note. This is how you solve a problem! dfranke is Pandora, a rat in a maze, Sherlock Holmes, General Sherman, William Randolph Hearst, and your father all wrapped in one. Like Pandora, he is so curious, he has to check this out. Like a rat in a maze, he keeps going looking for the clear path. Like Sherlock Holmes, he applies logic to determine the next step. Like General Sherman, he keeps marchin…

Thanks, I think that's the most elaborate compliment I've ever gotten.
Post reply on HN