POINTYFEATHER aka Tar extract pathname bypass | Hacker News Reader