• (disco)

    Remember kids, always test your pens before writing comments!

  • (disco)
    PaulaBean:
    This topic is now **unlisted**. It will no longer be displayed in any topic lists. The only way to access this topic is via direct link.

    So apparenly, “invisible” topic are now “unlisted”. But of course category-tracking users can still see them…

  • (disco) in reply to VinDuv
    VinDuv:
    So apparenly, <a href="https://github.com/discourse/discourse/commit/cf4bd67946be4c80cc9e1149fd7c7eef487b8c71">“invisible” topic are now “unlisted”</a>. But of course category-tracking users can still see them…
    Important changes vor Discourse version 1.1.:

    "Fix confusing terminology for invisible topics. Change 'invisible' to 'unlisted'."

    After "CLOSED;RESOLVED", claim that you have fixed a lot of bugs vor version 1.1.

  • (disco) in reply to faoileag

    fixing things by changing what they are called so you are Doing it Wrongtm rather than it being broken.

    Complaint Driven Development At It's Finest.

  • (cs) 
    u += '&commentnumber=' + encodeURIComponent('frist');
  • (disco)

    Wow... just wow... I mean, why? Why would you do this? How could this reach any point further after commited. So many crazy would have had to happen here.

  • (disco)

    Oh, the power of lazy. These kind of things happen in my work place all the time.

    Someone just signs it off, because reading beforehand really would be too much hassle for QA.

  • (disco) in reply to aliceif
    aliceif:
    Remember kids, always test your penis before writing comments!

    Test my what now?

  • (disco) in reply to Eldelshell

    Well, how else would you maintain state and database connections between requests? HTTP is a connectionless protocol, after all. It's not like we have server-side persistent objects that keep the user's state.

  • (disco) in reply to boomzilla
    boomzilla:
    blablabla
    \*cough* you should have used full:true if you really wanted to troll by misquoting \*cough*
  • (disco) in reply to aliceif
    aliceif:
    \*cough* you should have used full:true if you really wanted to troll by misquoting \*cough*

    I prefer to take that off. If only because I hate it on principle.

  • (disco) in reply to Eldelshell

    As it looks like they are using FrontPage or a very old version of DreamWeaver to edit the files, they obviously don't care about code quality.

    Alternatively, this code snippet was discovered at the beginning of the century, when such things as having a language attribute in a script tag was considered remotely necessary (hint: it never was) and there wasn't anything better to post

  • (disco)

    #OMFGWhoReallyDoesThis

    A new meme was born today.

  • (disco) in reply to aliceif
    aliceif:
    full:true

    What's that, then?

  • (disco) in reply to FrostCat
    FrostCat:
    What in the world are you talking about?

    It disables the ^ icon.

  • (disco)

    Is it crazy that I am thinking of a way to brute force the original text that is blurred? Since the blur reduced each character segment to 4 pixels more or less. The font is also fixed-width so you can guess how many characters there. So it becomes roughly easy....if a computer did the work. So get a program, load the same font, and iterate until it matches...appName would be broken in the first hour since it's 3 characters.

  • (cs)

    There is one pizza company in US of A that is having this sending password in ajax (plain text) too to verify login of user.

    That code was developed in Phillipines.

  • (disco) in reply to delfinom

    So, what are you waiting for? "Enhance" and post the results already!

  • (disco) in reply to cellocgw

    Can't he just create a GUI in Visual Basic to find the page the source code's from?

  • (disco)

    Someone coming from a technology like VB4 Windows apps to create a web app at a really small shop, I'm guessing. Wouldn't be too surprising.

  • (disco) in reply to aliceif
    aliceif:
    Remember kids, always test your penis before writing comments!

    what?

    aliceif:
    Remember kids, always test your pens before writing comments!

    oh... right. ok. of course. yeah.

  • Pentester (unregistered) in reply to Nagesh
    Nagesh:
    There is one pizza company in US of A that is having this sending password in ajax (plain text) too to verify login of user.

    That code was developed in Phillipines.

    Ah, so Nagesh really is an indian in America pretending to be an American pretending to be and Indian in India....

  • (cs) in reply to Pentester
    Pentester:
    Nagesh:
    There is one pizza company in US of A that is having this sending password in ajax (plain text) too to verify login of user.

    That code was developed in Phillipines.

    Ah, so Nagesh really is an indian in America pretending to be an American pretending to be and Indian in India....

    According to some theory, I am also Jeff Atwood' alter ego.

  • the beholder (unregistered) in reply to Nagesh
    Nagesh:
    Pentester:
    Nagesh:
    There is one pizza company in US of A that is having this sending password in ajax (plain text) too to verify login of user.

    That code was developed in Phillipines.

    Ah, so Nagesh really is an indian in America pretending to be an American pretending to be and Indian in India....

    According to some theory, I am also Jeff Atwood' alter ego.

    Impossible. Nowhere near as much arrogance for that. I think the entire TDWTF's readership combined wouldn't muster up as much of an ego.

Leave a comment on “A Pentester's Paradise”

Log In or post as a guest

Replying to comment #:

Log Out

« Return to Article