Live data from Hacker News

We pwned X, Vercel, Cursor, and Discord through a supply-chain attack

gist.github.com

451–453 of 453 posts

Re: We pwned X, Vercel, Cursor, and Discord through a supply-chain attack

#451
post #448
post #359

Earlier quoted context omitted.

That's "San Francisco Bay Area" for anyone else wondering

Is this synonymous with AI-assisted coding now??

The person above implies as much. Doesn't mean anyone else thinks it

Re: We pwned X, Vercel, Cursor, and Discord through a supply-chain attack

#452
post #339

Earlier quoted context omitted.

Trust doesn’t though - discord.com/docs looks legit, as does docs.discord.com - discord-docs.com immediately sets off red flags

Is there no way to tell the browser “hey this URL is using the same domain but please isolate it from the rest”?

You can use a sandboxed iframe without an origin.
Post reply on HN