316 karma · joined February 25, 2025
EDIT with every day I hate you more and more
"Ah yes, that small speck of chitin among 2 million other corpses is obviously a head of the Leptothorax sp. worker."
Why not? If security is the priority, the worst that could happen from that is clutter in logs and higher resource use. Nobody wastes 0days spraying them on random hosts, and a real motivated attacker targeting your server will not be stopped by an ip blacklist.
I enjoyed reading it too, but the ending was disappointing. But not as dissapointing as most comments here.
Visiting https://superlogout.com/ logs you out of gmail with a cross-site GET request and it's not considered a vulnerability by google [0]
Posts could contain a safe subset of html (no scripting) including <img> as a feature - that used to be an acceptable design choice. In connection with the /signout it did allow for some unfortunate shenanigans - the kind of bug you just add additional sanitization for and move on, nothing indicative of a below average code quality.
>If you don't want to call that an XSS, what would you like to call that?
I would call the version you described a HTML injection to CSRF, but as Dylan16807 noted apparently it does fit OWASP's wide definition of XSS: "Since then, the term has widened to include injection of basically any content." [1] But that's not what happened, there was no HTML in usernames and HTML in posts was intended.
[0] https://bughunters.google.com/learn/invalid-reports/web-plat...
[1] https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Sc...
Any examples?
My reading is the inability to understand serves only as an educational device for the reader. After all, at the end of the article the only point of contention is whether or not the objective truth exists. Is your point that the postmodern types don't claim that it doesn't? Or that they're an easy target used to later claim victory against a larger group?
EDIT typo
Sounds pretty similar to a calculator with a numerical root-finding algorithm, if you only substitute board position it has never encounterd with a polynomial it has never encountered.
>The core of being intelligent is being able to make decisions independently
What does it mean for a deterministic algorithm to make decisions?
Yeah if you totally ignore the unprecedented crazy high standard of living developed over trillions of work-hours.
>there is us, and there is them, and we want to end up with us having X and them not having it
There is your family, and different families, and you want to end up with your kid having the last icecream rather then some other guy having it.
>My objective is not to "favour my kid"
But you are favouring your kid, and it would become conflictual if someone demanded your money for his kid.
Come on, the outgroup is indefinitely big and the resources are limited. You buy icecream for your kid and not for the random kid. You favour the wellbeing of human race to that of aliens. Presumably you understand the will of Sentilese people to not share the island with strangers. Does it matter whether they think "we have to do this to protect our existence" or "we fucking hate white people"?
I think if you try to define what forms of favouring the ingroup are justified and what it means for Steve to deserve X you'll end up with something like "discrimination is bad when it violates the liberal moral intuition". Don't get me wrong, I love meritocracy and the world it built, but I don't think we can navigate millenia worth of social constructs with a simple rule of thumb.