News for hackers. Stuff that matters.
Re:Show HN: Non.io, a Reddit-like platform Ive been working ... by chrisshroba on Tuesday June 13, 2023 @08:05AM (#36309008)
When I load the all page, I get an alert that just says "1", which feels like it's probably a successful XSS attack. Given that, I can't justify putting my credit card number directly into the site. If it took Paypal, Apple Pay, or similar I would absolutely give it a try for a few months.

Screenshot of the alert (imgur marked it as nsfw because it includes a thumbnail of a post that is mildly nsfw): https://imgur.com/a/TmwO1jg

The likely culprit: https://imgur.com/a/rJrLxfn

Re:Show HN: Non.io, a Reddit-like platform Ive been working ... by Psychotherapist on Tuesday June 13, 2023 @08:36AM (#36309346)
It appears that it is the post at https://non.io/xss