Hacker News Reader

I can't see how it's a "sneak an plug" here. It's just a constatation of how easily exploitable the flaw is, using common tools like cURL.

If an insecure website can be hacked using only dev tools in the browser, does anyone blame browser vendor?

View on HN

I guess you're right, but in this context it's clear by curl's author's blog post mentioned in my original post, that cause can be easily confused by less technically savy readers.

I am interested in knowing which readers are technical enough to know or care what cURL is, but not technical enough to understand that the vulnerability isn’t in cURL itself.

Are you aware of this story: https://www.theregister.com/2006/03/24/tuttle_centos/ ?

You can know that cURL is some app, she then give it's web pages on the internet.

Reply on news.ycombinator.com