20% of all Node.js modules found vulnerable to injection attacks

Re:20% of all Node.js modules found vulnerable to injection ... by crispyporkbites on Monday March 12, 2018 @11:28AM (#16568760)

This was posted 9 hours ago with the paper title as the name, and got 3 upvotes:

https://news.ycombinator.com/item?id=16566587

I thought it was interesting and relevant for this audience, so I put a more sensational (but arguably accurate - you can argue the semantics of vulnerable all day) headline in the title to grab HN reader's attention. Now it is top of the front page with 40 votes in 25 minutes.

If you want to read papers like this everyday, I got it from the morning paper mailing list: https://blog.acolyer.org/

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by dang on Monday March 12, 2018 @12:26PM (#16569236)

That's against the site guidelines. Would you please read them and follow them when posting here?

https://news.ycombinator.com/newsguidelines.html

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by ScottBurson on Monday March 12, 2018 @07:14PM (#16572540)

Hi Dan — along with rebuking the poster, I wish you had also fixed the title. There are substantive issues here worth discussing.

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by dang on Monday March 12, 2018 @08:24PM (#16572890)

Ok, how about we put https://news.ycombinator.com/item?id=16566587 in the second-chance queue (described at https://news.ycombinator.com/item?id=11662380 and links back from there).

Edit: it's on the front page now.

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by dspillett on Monday March 12, 2018 @11:38AM (#16568843)

So basically: click-bait / vote-bait works, even with audiences that I expect to have a larger degree of technical literacy overall than the general populace.

Sometimes I worry about humanity!

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by msla on Monday March 12, 2018 @11:39AM (#16568850)

Upvote is commonly used to mean "read it later" by this audience. It is by no means a vote on quality.

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by dvlsg on Monday March 12, 2018 @12:11PM (#16569088)

I sometimes upvote even when I disagree, if I think it will lead to quality discussion.

I'm not sure this is one of those times, though.

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by dspillett on Tuesday March 13, 2018 @06:07AM (#16574881)

I can't say as I would think to use an upvote that way. I'd leave the article open in a tab, add it to browser bookmarks, or add it to a list in my preferred notes/reminders app (currently Google's Keep).

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by minimaxir on Monday March 12, 2018 @11:51AM (#16568940)

This is an incorrect use of absolutes.

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by crispyporkbites on Monday March 12, 2018 @11:43AM (#16568888)

Is it? How do you see your upvoted content to read later?

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by grzm on Monday March 12, 2018 @12:08PM (#16569066)

In your profile there's a link to upvoted submissions.

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by minimaxir on Monday March 12, 2018 @11:40AM (#16568858)

Keep in mind that "9 hours ago" is after midnight/close to midnight for a large portion of the HN user base, so a small number of upvotes is not surprising.

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by crispyporkbites on Monday March 12, 2018 @11:43AM (#16568883)

But shouldn't the number of stories posted then be lower, which means it stays on /new for longer and gets more visibility?

[ Parent | on HN ]

Re:20% of all Node.js modules found vulnerable to injection ... by minimaxir on Monday March 12, 2018 @11:49AM (#16568926)

More visibility is not quite correct: although it is on /new for longer, the number of people reading /new is much fewer, too.

[ Parent | on HN ]