Re:Security issues on ArtChain
by mentat on Monday November 05, 2018 @09:56AM
(#18382714)
He still hasn't fixed the XSS name entry, it pops if you go to the site. Amazing.
[ Parent
| on HN ]
No kidding, just going to [REDACTED] and boom there it is.
With how nasty this guy has been, it's like he's asking for a bad actor to really cause trouble.
I'd be so happy to have anyone file a report like the author did, exposing possible flaws in a platform I operate.
Re:Security issues on ArtChain
by wlesieutre on Monday November 05, 2018 @10:28AM
(#18382991)
Word of warning for anyone clicking that, it currently redirects to Pornhub.
YIKES.
I pulled the link, anyone curious can figure out how to reach artchain dot info on their own time.
Re:Security issues on ArtChain
by wlesieutre on Monday November 05, 2018 @11:13AM
(#18383461)
Thankfully SonicWall caught it here, but hopefully nobody's looking at what sites I tried to visit :P
Re:Security issues on ArtChain
by sebastienrocks on Monday November 05, 2018 @10:28AM
(#18382993)
Someone played around with it, you still get the XSS alert, but after that you get redirected to pornhub. Funny stuff.
Not so funny when you're going there at work, but that was my fault.