10,880 karma · joined October 29, 2013
"Git and email are the two really only tools I use"
"I'm not a programmer, I'm a development lead"
I used to run a user script to hide karma numbers. [update: thanks Bender, since I run uBlock Origin I added a filter for karma again just now]
> We have no malicious intentions. Our only goal was to identify these security issues and inform the developer so they can be fixed.
> conducted this research in good faith.
Posting it online the same day, then posting on HN to promote it isn't good faith.
- Any user’s private profile could be retrieved, including:
• Chosen Username
• Total Segment Count
• Minutes Saved for the community
• View Count (how many times their segments helped others)
• Reputation Score
• VIP Status
• Privacy Preferences
Anonymous user names and some counts.Red flag of fake numbers and immediately close the browser tab.
"Wikipedia deprecates Archive.today, starts removing archive links" https://news.ycombinator.com/item?id=47092006
"Archive.today is directing a DDoS attack against my blog" https://news.ycombinator.com/item?id=46843805
"Ask HN: Weird archive.today behavior?" "I noticed this, like, 3 days ago) started automatically making requests to someone's personal blog on their CAPTCHA page" https://news.ycombinator.com/item?id=46624740
> isn't able to submit this site
I haven't seen this error message before. It looks like "this site" was submitted before?
https://www.fiverr.com/.well-known/security.txt only has "Contact: security@fiverr.com" and in their help pages they say "Fiverr operates a Bug Bounty program in collaboration with BugCrowd. If you discover a vulnerability, please reach out to security@fiverr.com to receive information about how to participate in our program."