Hacker News Reader

In 1998 a buddy and I made a site for ladder style Total Annihilation game matching site, built entirely with ASP 2.0 and VBScript. I honestly thought nothing of security. I was just happy that I got it working. I luckily had a friend who cheesed the entire site showed me several xss and sql injection attacks. At first I was happy that users could use HTML to decorate their messages, then I saw a login box appear where I know it shouldn't be...

View on HN

Reminds me of the time in my university where all exams were "online". It was nearly completely client side with VBScript carrying the answers to select.

For 4 years I managed to get straight As until a leaky mouth discovered and disclosed it to the IT dept. Me and my friends were never doubted for since we were the top A students with foul mouths. The guy who reported it felt a sense of pride but whatever..

This was late 90s, early 2000s. Was fun times.

Reply on news.ycombinator.com