Hacker News Reader

I think the negativity comes from the fact this site now linked on the front page of HN can be hacked to send malicious JavaScript to people...

Also, in my opinon, adding "Demo" means that it shows how to do it, but that's not clearly not how to do it properly.

View on HN

Yes it should not be getting the attention it is getting right now, but we can approach this in a more generous fashion. Let's help rather than ridicule.

Well even Google still has tons of bugs (including XSS and XSRF).

Nowadays it's not possible to write applications without knowledge of XSS, XSRF, SQLi, redirects etc.etc. The security amount you have to understand is just getting ridiculous.

And let's not even mention DOS. No-one is securing against that and most servers can be made inaccessible by a simple script that just opens connections.

Reply on news.ycombinator.com