Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

That company whose name used to contain HTML script tags Ltd

find-and-update.company-information.service.gov.uk

Post reply on HN
Print view View original

21–30 of 164 posts

Re: That company whose name used to contain HTML script tags Ltd

#21

Post by mathieuh »

Someone1234 wrote: post #19
mathieuh wrote: post #17

Is Companies House's website not done by GDS or something? I worked on a few GDS projects for DFT, we had to have independent pen testers test our services before they moved between phases.

Companies House wasn't compromised, they warned third parties about potential issues with the underlying data.

No I mean the fact that this was possible on their website, XSS is one of the simplest things to test, in fact it was one of the standard tests UI testers would do on new screens.

Not saying they were compromised.

Re: That company whose name used to contain HTML script tags Ltd

#24

Post by achairapart »

hliyan wrote: post #18

On a related topic, the name of the company I work for starts with a colon. The rest of the name is a common adjective. As you can imagine, it is virtually ungooglable at the moment. Any thoughts on how to get around this?

Launch a multi-million dollar brand advertising campaign.

Re: That company whose name used to contain HTML script tags Ltd

#25

Post by mtmail »

hliyan wrote: post #18

On a related topic, the name of the company I work for starts with a colon. The rest of the name is a common adjective. As you can imagine, it is virtually ungooglable at the moment. Any thoughts on how to get around this?

And I thought Yahoo! (with exclamation mark) had it rough.

Re: That company whose name used to contain HTML script tags Ltd

#26

Post by ceejayoz »

mathieuh wrote: post #21
Someone1234 wrote: post #19

Earlier quoted context omitted.

Companies House wasn't compromised, they warned third parties about potential issues with the underlying data.

No I mean the fact that this was possible on their website, XSS is one of the simplest things to test, in fact it was one of the standard tests UI testers would do on new screens. Not saying they were compromised.

It wasn't possible on their website.

They provide data feeds to many third parties, who might themselves be vulnerable, hence the notification.

Re: That company whose name used to contain HTML script tags Ltd

#28

Post by ceejayoz »

NullPrefix wrote: post #16
klodolph wrote: post #6

Earlier quoted context omitted.

Because there are a bunch of companies which do aggregation of information about companies, and not all of them used parameterized SQL queries :-/

And who's problem is that?

On a "what's reasonable" level, or on a "gets you called in by a minister or MP to be yelled at" level?

Re: That company whose name used to contain HTML script tags Ltd

#30

Post by Zelphyr »

hliyan wrote: post #18

On a related topic, the name of the company I work for starts with a colon. The rest of the name is a common adjective. As you can imagine, it is virtually ungooglable at the moment. Any thoughts on how to get around this?

Is it "Colon Blow"?
Post reply on HN