Live data from Hacker News

How I Hacked Hacker News (with arc security advisory)

news.ycombinator.com

81–84 of 84 posts

Re: How I Hacked Hacker News (with arc security advisory)

#81
I can't believe what I'm reading: You are superman. You are my hero. I want to be your friend. I WANT TO HIRE YOU!

Let me tell you something. If this poor guy gets hired by one of you, he'll probably end up working with a retarded person and reading cookies for the rest of his life.

To the hacker: Keep having fun mate, but don't allow your time to be cluttered up by things that don't make a difference, like a cookie.

PyMan

Re: How I Hacked Hacker News (with arc security advisory)

#82
post #74
post #4

This is pretty interesting stuff, but man it would have been nice if you were able to post it somewhere with actual HTML formatting. The gray on gray is tough after a full screen or two.

Gray on gray is awful. Does only one person like it? :-) Here's a fix for Firefox that doesn't need the overhead of Greasemonkey. http://news.ycombinator.com/item?id=563492

Thanks. I now use the following and my HN headaches are gone:

  @-moz-document url-prefix(http://news.ycombinator.com/) {
     td { color: #000000 !important; }
     td.title a:visited { text-decoration: line-through !important; }
     td.subtext { padding-bottom:2em !important; }
  }

Re: How I Hacked Hacker News (with arc security advisory)

#83

Very nicely done. This is precisely the attack that I described in a HN post a month ago. Glad to hear that it would have worked if I'd had time: http://news.ycombinator.com/item?id=596126

It's worth noting that reading /dev/urandom isn't exactly cheap. Probably fine for generating session IDs in most circumstances, but if you're using it in another situation (e.g. shuffling something), you might find the performance is terrible.

But it is still better then reading from /dev/random
Post reply on HN