News for hackers. Stuff that matters.

bbastian

Re:CNN, NYTimes, Mashable all vulnerable to XSS on Thursday October 20, 2011 @06:41PM (#3137444)
This makes me wonder; how is it appropriate to handle vulnerabilities such as these?

A few months ago, I decided (as an experiment to see how common XSS actually is) to click on random HN links and type "<asdf '\"" into any search bars and look for weird rendering on the page or weird behaviour in the page source. After half an hour, I had five or so exploitable XSS vulnerabilities, two of the more prominent ones being CNN and Newegg. I sent emails to their security-related issue addresses, but they never responded or fixed the issue.

After sending them a couple more emails, I just gave up. But this article makes me wonder, could I have handled the situation better? The thought of releasing a benign-but-scary exploit crossed my mind, b ut I'm uncertain...

My weekend project: whichpicis.me

Hey, all. My weekend project was to make an experimentally viral web application, similar to threewords.me. If anyone has tips on making it more "viral" or better in general, I'd be open to suggestions!

( Read More... | 3 comments | 3 points | on HN )

Ask HN: When should you start a start-up?

Perhaps this question is too general, but when should someone start a start-up? When you see a need? Or have a "million-dollar idea"? When you're young/old? Before/during/after college? When you're poor/rich? Etc.

( Read More... | 9 comments | 5 points | on HN )
Re:Ask HN: QA service? on Saturday August 21, 2010 @03:04PM (#1623416)
Check out Selenium (http://seleniumhq.org/). It's pretty decent.
Re:What programming language to learn RoR or PHP? on Sunday May 23, 2010 @12:04AM (#1371761)
I'd recommend avoiding PHP. For quick prototyping, I'd recommend Rails, though (in my opinion) Ruby/Sinatra or Python/Tornado would be better overall.
Re:Ask HN: Tradeoffs of using a nosql database? on Sunday May 09, 2010 @03:35PM (#1332725)
Well, with CouchDB, you have to pre-define all of your queries with "views". And the first time you call a view, it has to run your mapping function against -every- document in the database, which takes a ton of time.

Ask HN: How can I make something which people appreciate?

It's one of my dreams to make something which makes someone who I don't know say, "Wow! That's cool!" Either that or build a community. Or both! However, I'm unsure how to do that. I think that I'd like it to be something web-based because of the wide audience which the medium offers. Can anyone give me some advice on how to accomplish this goal?

( Read More... | 4 comments | 4 points | on HN )
Re:Ask HN: What's your favorite nerdy joke? on Thursday May 06, 2010 @01:36AM (#1323664)
Q: Why do mathematicians confuse Halloween with Christmas?

A: Because OCT 31 == DEC 25.

Re:Ask HN: How can a 19-year-old find web programming work? on Tuesday April 27, 2010 @11:33PM (#1300648)
Hmm. This is rather difficult. I'm under a lot of pressure from my parents to move out of the house and support myself. However, I have no experience doing anything else. I've applied to many jobs which require no skill, but have had no luck. Not really sure what to do... I don't dispute that building a portfolio, going to college and getting a degree would be a good idea, but I'm just trying to solve a difficult situation.
I live near Seattle.

Ask HN: How can a 19-year-old find web programming work?

I'm a 19-year-old, self-taught programmer (C/C++, Ruby/Rails and PHP, mostly). I'm in the middle of a transitional year between high school and college and I know that I'd like to pursue a career as a web programmer. I've gotten a few programming jobs here and there, but nothing really substantial. If I could find a full-time job, I'd consider postponing college, but I haven't had much luck so...

( Read More... | 12 comments | 11 points | on HN )