Hacker News Reader

Hacker News

Comment by edgeyboy | Hacker News Reader

Full thread

edgeyboy

After going through the source code, I can tell for sure that it's an insecure C transpiler.

- Most things call just out to C.

- A lot of examples don't even compile.

- Some things use CLI curl or mkdir, this is /INCREDIBLY/ insecure.

- Many things are unimplemented.

- Dev banned me off org when I opened issues about these and deleted issues. I was unnecessarily rude on some which I apologize for, but deleting them and calling me a troll was uncalled for.

I wrote about them here: https://twitter.com/boy_edgey/status/1142504580074344448 (thread)

View on HN

I have to agree from the snippets of your reports, the tone of those reports were needlessly antagonistic and superior.

Starting a report with "You idiot" or "Oh god this is a fucking goldmine" should get you banned, even if the issue you are reporting is real. Such reports aren't trying to contribute to the project; they are trying to boost the reporter.

I didn't ever say "Oh god this is a fucking goldmine". That was a reply.

Well you were calling him an idiot in the issues and being overall aggressive. I would ban you too (but I'd keep the issues after some editing).

I apologize for criticizing the person and not the project, but again, the fact that he deleted the issues is unreasonable.

I, too, would delete needlessly aggressive issues on my open source projects if I didn't end up editing them to make them actually usable. Either way, it'd definitely be a ban so the user wouldn't edit them back or escalate with more aggression in other issues.

Besides on many of those you were simply wrong like with rand.next() returning 0 and missing _lin.v files.

>I was unnecessarily rude on some which I apologize for, but deleting them and calling me a troll was uncalled for.

I wouldn't say troll, but you still come out as rude-ish in this comment.

"- Some things use CLI curl or mkdir, this is /INCREDIBLY/ insecure."

Not anymore than tons of established projects that use the same...

What's insecure about curl and mkdir?

They're called through os.system.

Say that you have a website that relies on downloading content from URLs supplied by users. A user can send a "specially constructed" URL ("anything;commandgoeshere") and run any command they'd like on your server.

I would be surprised if you're not banned, for personal attack the author.

Reply on news.ycombinator.com