Using Goatse to Stop App Theft

Re:Using Goatse to Stop App Theft by Quarrelsome on Tuesday October 17, 2023 @12:10PM (#37917299)

doesn't this mean I could embed salacious material into a link and fool people into thinking the person who owned this website wrote it?

[ Parent | on HN ]

Re:Using Goatse to Stop App Theft by generalizations on Tuesday October 17, 2023 @12:29PM (#37917613)

> Anything can be generated here. You could even host your own blog that uses my website as a renderer if you really wanted to. It supports markdown.

> Every post that I want to publicly claim authorship of lives at the root of this site. If you are reading a post that I have claimed it will look like this page. Posts of unknown authorship have a disclaimer at the top of the page.

https://joshcsimmons.com/post/H4sIAAAAAAAA%2F3xV227cRgx911cQ...

(His permalinks are horrible, lol)

[ Parent | on HN ]

Re:Using Goatse to Stop App Theft by jbarrs on Tuesday October 17, 2023 @12:42PM (#37917791)

>Posts of unknown authorship have a disclaimer at the top of the page.

Problem is, the posts can contain <script> elements. So it's easy to just write a little JavaScript that removes the disclaimer at the top. See this hastily-made, immature example of mine:

https://joshcsimmons.com/post/H4sIABO8LmUC/3VT0W7aQBB85yu2QV...

As it stands, this really isn't the most secure system. Something much more malicious could be injected into this!

[ Parent | on HN ]

Re:Using Goatse to Stop App Theft by pjot on Tuesday October 17, 2023 @01:24PM (#37918426)

I was halfway expecting goatse

[ Parent | on HN ]

Re:Using Goatse to Stop App Theft by latexr on Tuesday October 17, 2023 @04:14PM (#37920909)

Shouldn’t it be “shat”?

Either way, considering the submission we’re commenting on, the author of the blog may appreciate your humour.

[ Parent | on HN ]

Re:Using Goatse to Stop App Theft by joshcsimmons on Tuesday October 17, 2023 @07:00PM (#37922705)

Correct

[ Parent | on HN ]

Re:Using Goatse to Stop App Theft by joshcsimmons on Tuesday October 17, 2023 @06:59PM (#37922703)

This gave me a pretty good laugh. I have some sanitization and guards set up now. TBH I never really expected anyone to visit my blog.

[ Parent | on HN ]

Re:Using Goatse to Stop App Theft by bravetraveler on Tuesday October 17, 2023 @12:15PM (#37917406)

XSS as a feature, neat

[ Parent | on HN ]

Re:Using Goatse to Stop App Theft by hundchenkatze on Tuesday October 17, 2023 @12:48PM (#37917884)

Yes...

https://joshcsimmons.com/post/H4sICIi6LmUAA3RtcC5odG1sADWMMQ...

[ Parent | on HN ]

Re:Using Goatse to Stop App Theft by joshcsimmons on Tuesday October 17, 2023 @06:54PM (#37922653)

unfortunately patched now

[ Parent | on HN ]