Hacker News Reader

Here's one reason why it's not a brilliant platform, check the URL after clicking log in:

http://codecombat.com/play/ladder/gold-rush?email=ohdear@exa...

edit: Seems to only happen after clicking log in on the main page right side bar rather than the header one.

Can you email nick@codecombat.com to help us reproduce this? It sounds like a form is getting submitted somehow, which shouldn't happen. I haven't been able to reproduce in Firefox, Chrome, or Safari yet.

Sorry about this–we take security seriously.

Thanks, I've dropped you an email with the steps to reproduce. Somehow I had landed on a particular ladder page and it looks like it may have an older style log in modal.

Thank you! I'm tracking the bug over here and will fix soon: https://github.com/codecombat/codecombat/issues/1153

Nice response time!

No, it might be insecure, but that doesn't mean that it's not brilliant. The platform is not designed for security. It's designed to play a game while coding, and it does that.

Reply on news.ycombinator.com