Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

4chan source code leaked (2010)

pastebin.com

Post reply on HN
Print view View original

51–60 of 114 posts

Re: 4chan source code leaked (2010)

#51

Post by brador »

ANTSANTS wrote: post #39

Not much to see here, folks. Someone took an old leak of the source code and commented out a few lines for a giggle. Only moot and the developers know what the site looks like now, but given the significant addition of functionality in the past few years, it's pretty much impossible that that would be the only difference in the source. The original leak, from 2010 at least, possibly older: http://pastebin.com/4JVjS02…

Wouldn't the ideal solution for 4Chan be an external data/processing server that dials in to the hosting server to dump out static files? That way the location of the external server remains, at least partially, a mystery, even after the main box is hacked?

Re: 4chan source code leaked (2010)

#52

Post by aidos »

Kiro wrote: post #44
NewsReader42 wrote: post #6

if(isset($_COOKIE['4chan_auser'])&&isset($_COOKIE['4chan_apass'])){ $user = mysql_real_escape_string($_COOKIE['4chan_auser']); $pass = mysql_real_escape_string($_COOKIE['4chan_apass']); } HAHAHAHAAHAHAHAHAA Steal a cookie, gain access.. WTF

How do you "steal" a cookie?

The best bet is generally an xss attack. Though there are other ways, you could sniff one on a wireless network if no encryption is in use.

Re: 4chan source code leaked (2010)

#54

Post by pearjuice »

brador wrote: post #51
ANTSANTS wrote: post #39

Not much to see here, folks. Someone took an old leak of the source code and commented out a few lines for a giggle. Only moot and the developers know what the site looks like now, but given the significant addition of functionality in the past few years, it's pretty much impossible that that would be the only difference in the source. The original leak, from 2010 at least, possibly older: http://pastebin.com/4JVjS02…

Wouldn't the ideal solution for 4Chan be an external data/processing server that dials in to the hosting server to dump out static files? That way the location of the external server remains, at least partially, a mystery, even after the main box is hacked?

Why? 4chan is not a high target. There is no reason to over engineer it. Mostly it will be prepubescent teenagers throwing a fit and bombarding the server with bandwidth.

The hack of earlier today was due to an obsession over a female 4chan moderator. That should say enough.

Re: 4chan source code leaked (2010)

#56

Post by exDM69 »

Kiro wrote: post #44
NewsReader42 wrote: post #6

if(isset($_COOKIE['4chan_auser'])&&isset($_COOKIE['4chan_apass'])){ $user = mysql_real_escape_string($_COOKIE['4chan_auser']); $pass = mysql_real_escape_string($_COOKIE['4chan_apass']); } HAHAHAHAAHAHAHAHAA Steal a cookie, gain access.. WTF

How do you "steal" a cookie?

Get on the same WiFi as your target, open up Wireshark and grab their HTTP communications.

To make this easier, there was/is a tool called Firesheep that can be used to hijack session cookies. The popularity of Firesheep caused many sites to enable HTTPS by default (e.g. Facebook did so).

Re: 4chan source code leaked (2010)

#57

Post by spoiler »

ledneb wrote: post #11
spoiler wrote: post #5

Earlier quoted context omitted.

> It seems that it's too terrible to be the true code. 1. It's written in PHP. Finding a good PHP developer is nigh impossible (there are exceptions, like always). 2. I expected worse, to be honest.

No serious, modern PHP developer writes code like this. If it were a code sample for any respectable PHP job, it would be a massive "do not hire" flag.

> (...) serious, modern PHP developer (...)

A "serious PHP developer" is an oxymoron.

Re: 4chan source code leaked (2010)

#59

Post by dewey »

roryhughes wrote: post #58
dewey wrote: post #30

And yet, despite the horrible code, it's still powering an Alexa Top 500 page without any huge problems I've heard of.

Crazy. I knew PHP was bad, but this is just terrible.

I know hating on PHP is en vogue but you could probably write the same ugly code with another language too.

Re: 4chan source code leaked (2010)

#60

Post by roryhughes »

marban wrote: post #38
TheAceOfHearts wrote: post #32

I think this just goes to show that you can have a lot of popularity even if your code is just sorta glued together. Don't they get a few million users? I'd say it's definitely nothing to scoff at. It makes me wonder how many big profile websites might look like this or worse.

imgur might be a candidate.

I doubt it. At their scale (a million uploads daily, three billion monthly pageviews), crappy code is unlikely.
Post reply on HN