Never Give Your Information To 10 Minute Old Startups

Re:Never Give Your Information To 10 Minute Old Startups by LnxPrgr3 on Friday October 05, 2012 @11:22PM (#4619663)

I'm generally with you, but I do hope that this tarring and feathering will drive home one point:

Don't trust the client.

The user ID in the URL like this is a giant "try editing me and see what happens" sign, even if you came with no intention of providing unsolicited pen testing. I seriously doubt just this one person noticed.

[ Parent | on HN ]

Re:Never Give Your Information To 10 Minute Old Startups by larrys on Friday October 05, 2012 @11:35PM (#4619697)

"The user ID in the URL like this is a giant "try editing me and see what happens" sign"

What's really surprising is that apparently the dev on this never viewed any porn on the internet.

[ Parent | on HN ]

Re:Never Give Your Information To 10 Minute Old Startups by philp on Saturday October 06, 2012 @01:03AM (#4619851)

Could you elaborate? I fail to see the connection.

[ Parent | on HN ]

Re:Never Give Your Information To 10 Minute Old Startups by daeken on Saturday October 06, 2012 @02:01AM (#4619925)

Not sure what the parent is referring to, but back in the day you'd have porn preview galleries with no index, but with an easily enumerable id in the URL. Ah, youth...

[ Parent | on HN ]

Re:Never Give Your Information To 10 Minute Old Startups by larrys on Saturday October 06, 2012 @02:22PM (#4621238)

You are correct.

[ Parent | on HN ]