Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by therealdrag0 | Hacker News Reader

Full thread

therealdrag0·

Anyone able to get past it?

View on HN

Quite a few "people" have solved it it looks like, and it's riddled with persisted XSS attacks once you get past it.

Here's the returned response when you succeed: https://hasteb.in/iyifapud.html

I found the "man" category to be the easiest to pretend to be a bot on.

My understanding of persisted XSS attacks is that it's not that the site is malicious, but that it had security holes, so other people who got through the captcha uploaded malicious scripts. Now the site is serving them unawares. Does that sound right?

Correct. If it were malicious on the part of the site, they could just send you that javascript anyway.

Yup! See my other post. I was asked to pick computers and I figured they'd all be in the greyish boxes and not the colorful ones. Turns out it was a good assumption.

No, but in the source you can get a message if you are the first to solve it.

There's only 2^9 possible selections for each board, someone will get it just by chance.

I just got it by chance, there seems to be a XSS vulnerability and some way to post things. Didn't expect so many alert windows to appear and not sure what else it was doing.

If that's getting though then for me it worked first time. It asked for "men" and the blurry outlines seemed pretty obvious to me.

Maybe I'm an android and I don't know it. Surely not I remember my childhood.

Just as we implanted it....

Humans have persistence. I guess that'll help them eventually get through using brute force.

Reply on news.ycombinator.com