Show HN: Embed Full-Page Screenshots in any Blog / App / Whatever

Re:Show HN: Embed Full-Page Screenshots in any Blog / App / ... by mmmooo on Wednesday March 06, 2013 @03:43PM (#5333769)

you are basing your 'token' on md5(data+secret), however md5 (and other hash functions) are easily extended when data and token are known, even without knowing secret. Basically, given data and token, I can produce a different token, that matches a (somewhat) different data, without knowing secret.

[ Parent | on HN ]

Re:Show HN: Embed Full-Page Screenshots in any Blog / App / ... by dherken on Wednesday March 06, 2013 @03:49PM (#5333800)

Sure you could, but then why would one go through all the hassle just to get a (probably already cached) screenshot?

[ Parent | on HN ]

Re:Show HN: Embed Full-Page Screenshots in any Blog / App / ... by mmmooo on Wednesday March 06, 2013 @03:57PM (#5333859)

well, for starters, I could use your (paid) account to get free screenshots.

[ Parent | on HN ]

Re:Show HN: Embed Full-Page Screenshots in any Blog / App / ... by bpatrianakos on Wednesday March 06, 2013 @07:35PM (#5335103)

But if you knew how to do that then you could probably set up webkit2png in a tenth of the time.

[ Parent | on HN ]

Re:Show HN: Embed Full-Page Screenshots in any Blog / App / ... by mmmooo on Wednesday March 06, 2013 @08:25PM (#5335329)

True, but what you are saying is only complex applications need to be secure?

[ Parent | on HN ]