Zero-day in jQuery plugin sample code exploited for at least three years

Re:Zero-day in jQuery plugin sample code exploited for at le... by yebyen on Sunday October 21, 2018 @04:50PM (#18270152)

OK. I'll be that guy. Is there nobody who is going to talk about Larry Cashdollar, the person who discovered this vulnerability and first reported it?

I'm honestly not sure how I'd be more impressed; if you told me this man actually uses this as his real name in his daily life, or by finding out that this is actually his birth name.

[ Parent | on HN ]

Re:Zero-day in jQuery plugin sample code exploited for at le... by hlieberman on Sunday October 21, 2018 @05:04PM (#18270245)

He's a former co-worker of mine, and is an awesome dude in many ways.

His name really is Larry Cashdollar, born and raised. Sometimes I wrote his name as 'Larry $$' though.

[ Parent | on HN ]

Re:Zero-day in jQuery plugin sample code exploited for at le... by blueimp on Sunday October 21, 2018 @05:41PM (#18270468)

Larry was also super helpful in identifying the underlying issue and very polite in his emails.

Would definitely write another security vulnerability into my code again if I knew that Larry would report it. ;)

[ Parent | on HN ]

Re:Zero-day in jQuery plugin sample code exploited for at le... by lcashdol on Monday October 22, 2018 @09:27AM (#18274426)

Thanks, :-)

[ Parent | on HN ]

Re:Zero-day in jQuery plugin sample code exploited for at le... by da_chicken on Sunday October 21, 2018 @09:32PM (#18271499)

> Would definitely write another security vulnerability into my code again if I knew that Larry would report it. ;)

Yet more proof that social media will bring the Internet down!

[ Parent | on HN ]

Re:Zero-day in jQuery plugin sample code exploited for at le... by subcosmos on Sunday October 21, 2018 @05:28PM (#18270381)

It's almost like he had JQuery selectors deep within his DNA! He was BORN to find this bug. The prophecy is true!

[ Parent | on HN ]

Re:Zero-day in jQuery plugin sample code exploited for at le... by svat on Monday October 22, 2018 @02:49AM (#18272656)

It appears to be a somewhat common surname. Looking up Wikipedia, there is Cindy Cashdollar (a musician), and a few others: https://en.wikipedia.org/w/index.php?search=Cashdollar+-%22C...

[ Parent | on HN ]

Re:Zero-day in jQuery plugin sample code exploited for at le... by galori on Monday October 22, 2018 @12:10AM (#18272111)

https://news.ycombinator.com/item?id=18271880

[ Parent | on HN ]