cowward - Hackdot

cowward

Re:Wisp: Small-but-featureful embeddable Lisp interpreter written in H... on Sunday November 03, 2013 @06:52PM (#6665716)

Does anyone have any good, language agnostic resources for writing interpreters (not just for lisp)?

Re:HelloRun - A WebGL 3D Game on Tuesday September 03, 2013 @04:11PM (#6323438)

I didn't realise it was a continuous range of heights, 3 set heights would definitely be better as the holes are at set heights. Fantastic game and music, though. Really demonstrates how capable WebGL actually is.

Re:Ask HN: How should I disclose a vulnerability in a site I worked on? on Sunday September 01, 2013 @07:07AM (#6309835)

I actually awoke one night about a week ago, fretting about SQL injections in the site. Upon checking my code my fears were confirmed. I did test the exploit on the live site but didn't actually access the database, just confirmed that it worked.

Have you ever heard of an organisation taking action against a former developer for reporting something like that? If I had a builder build me a house, and he came round a year later to tell me that my walls weren't strong and anyone could just break them down I would be pretty upset.

Ask HN: How should I disclose a vulnerability in a site I worked on?

Posted by cowward on Sunday September 01, 2013 @06:43AM
from the ask-hn dept.

I worked on a website just under 2 years ago. I recently discovered an SQL injection vulnerability which could easily allow any semi competent attacker full access to the database which contains personal details. It's an easy fix, I must have forgotten to escape some inputs. The problem is, I no longer have access to the server and the organisation has heavily restructured with my primary...

( Read More... | 3 comments | 2 points | on HN )