Live data from Hacker News

Pastebin abused

michielovertoom.com

51–53 of 53 posts

Re: Pastebin abused

#52
post #9

Never thought about this. It's scary what even a basic search such as site:pastebin.com password username can return.

Have you tried searching for "site:pastebin.com mysql_connect" ? That's even scarier. There's people that do post their database password and username publicly.

That is unlikely to matter - mysql and postsql doesn't allow connections from outside of localhost by default on Ubuntu (and properly other unixes as well).

So really, yeah if you already have local access you can pwn the box, but you have pretty much done that already.

Re: Pastebin abused

#53
post #32

Earlier quoted context omitted.

I wouldn't be so quick to dismiss Pastebin's legitimate uses. I see it get used all the time for sharing debug output and system logs (generally between systems where there isn't any other easy method of communication). The other ones may be prettier but Pastebin has mindshare.

What do you mean by "mindshare"? It's not like there is any real community on those sites. For me most of them are completely interchangeable. The only exception is Gist, which has the advantage of version control.

Lots of people (that I know, anyway) know what Pastebin is, and don't know of any of the other, similar sites. If they need to paste some output, they type "pastebin.com" into their address bar and that's it.
Post reply on HN