Instance information disclosure by abuse of metadata urls | Hacker News Reader