Hacker News Reader

LOL, these are literally just XSS attacks, the sky is not falling. This is such clickbait. Posts like this make the security community look bad IMO. Report it and move on.

View on HN

OLOL LITERALLY!?! What's your problem dude? A single XSS vulnerability can have severe impacts up to a compromise of a system when sensitive data from authorized users are stolen.

XSS is the most common bug on the internet, and there is nothing interesting or novel about this that warrants an article in my opinion. My problem is that this article makes people scared in a way that I do not think is productive. Kudos to whoever found the bug for finding it and making everyone safer, but I thought the article was needlessly clickbaitey. I agree I should probably be less cavalier-sounding though, sorry.

No offense. The widespread of XSS makes it not less harmful. Although attacks with XSS vulnerabilities requires further actions by the attacked users, these are often easily provoked. IMHO a vulnerability shouldn't be rated by its trivialness but by its impact.

Still I think checkpoint is doing clickbaiting, regarding to their description of the vulnerability and Telegrams reply.

Reply on news.ycombinator.com