News for hackers. Stuff that matters.

A comment on So Long, and Thanks for All the Fish. Parent comment

Re:So Long, and Thanks for All the Fish by ChrisAntaki on Monday May 11, 2015 @09:28PM (#9529002)
To be fair, the script is "http://localhost:35729/livereload.js". That shouldn't leak anything to an adversary, if the request doesn't leave the client's computer.

Still should be fixed though, so the HTTPS warning can serve its function and call out real threats.

[ Parent | on HN ]
Re:So Long, and Thanks for All the Fish by arthur_debert on Monday May 11, 2015 @09:41PM (#9529060)
You're 100% right. It's just that security is so hard to get right. Only (maybe not even) the paranoid survive on that front. All it takes is one tiny detail to screw everything up. Leaving development artifacts on your live server is not very tranquilizing on that front.
[ Parent | on HN ]
Re:So Long, and Thanks for All the Fish by aral on Wednesday May 13, 2015 @07:57AM (#9538234)
Indeed :) And thanks for the heads up, Arthur. Was a bit of debugging code left in by mistake. Fixed it when I was skimming these comments yesterday but haven’t had a chance to reply and say thanks until now :)
[ Parent | on HN ]