Hacker News Reader

Comment by 100-xyz | Hacker News Reader

Hi, This is very timely for us as we will be in the Bay area during Dec and Jan. However, I am not able to fill out or even see any forms. I live in China, so perhaps some js libraries from google etc are blocked? Any alternate ways to register? Our company website http://www.100-xyz.com Tx

View on HN

Sure! Here's a direct link to the application form: https://swapspace.typeform.com/to/Bg59Xe

If that doesn't work, send me an email (it's in my hacker news profile).

No. That is the link that does not load. Also cannot see your email in your profile. Perhaps not enough karma on my side? I know I shouldnt have kicked that cute puppy!!!

No problem. Just shoot me an email at max@swap.space.

HN really needs to add a note next to the email field: “Only you and HN admins can see this.” Put any info you want publicly visible into the about field.

Just doing a little test to see if typeform have closed the little vuln I submitted months ago: https://testytest.typeform.com/to/Bg59Xe

... appears not. People can still pose as others. You'd think they'd care a bit more about security after the hack in June. I recommend against using typeform for this reason.

Woah, crazy. Thanks for pointing this out...

Hi tomglynch

We are Typeform's security team and we want to let you know that we are aware of this issue and are actively working on finding a solution. This is a core functionality of the platform, and we need time to find the best solution without breaking the user experience.

We take security seriously and we review every single report we get to try to find the best possible solution.

Regards!

hi tf_security. It's been more than 4 months since I reported this. Regardless if it is a core functionality or not, this is too long.

I've seen .xyz so it's unpleasing to see xyz.com

There is a reason behind the naming. 100 is our platform, so any WiFi SSID that starts with 100- would be ours. 100-JamaicanRestaurant, 100-UpperCut, 100-BigJohn....

Hence the 100-xyz

Reply on news.ycombinator.com