• (disco)

    Oh no, seems my Firefox and Internet Explorer 11 installs also have hacker tools!

    Maybe they should check the user agent so that only Links is allowed.

  • (disco)

    These are the people that I generally find myself wanting to assault with a screwdriver, methinks.

  • (disco)

    So in other words, they banned development on a browser used by the populace because that would somehow prevent the populace from using said browser?

    In effect, this is the same thing as banning pencils in the back offices to prevent customers from using them in the foyer....

  • (disco)

    "I'm in the browser, and I can see all of the code!" Charlie explained. "I've hacked into the website. I see stuff like, 'div class equal sign—'"

    Has he tried ordering a pizza?

  • (disco) in reply to Tsaukpaetra

    i count myself lucky that it was the browser that was banned, and management did not insist on "encrypting" the web page for security

  • (disco) in reply to accalia

    Well, Javascript can be very thoroughly obfuscated...

  • (disco) in reply to rc4

    And when you obfuscate it, it makes it much harder for spambots to spam your site.

    Oh wait...

  • (disco) in reply to rc4
    rc4:
    Well, Javascript can be very thoroughly obfuscated...

    i was talking about the HTML

    i have seen some utter abominations that sought to obfuscate the HTML as much as possible.....

  • (disco) in reply to accalia

    Care to provide examples? :smiley:

  • (disco) in reply to rc4
    rc4:
    Care to provide examples? :smiley:

    PLEASE! NO!

    Don't make me go back to those places!

    the horror! the horror!

    the abuse of the DOM!

    The use of javascript to define "custom" tags so that no one could look at the source and know what <skrftlqwyprts href="https://what.thedailywtf.com/t/website-hacker/54674/10">click here!</skrftlqwyprts> was supposed to be!

    the insertion of "span" tags around EVERYTHING!

    The custom handlers on keyboard and mouse events to prevent you from presssing keys such as "Ctrl+C"!

    /me runs away sobbing

  • (disco) in reply to rc4

    Before the days of firebug the common way was to include about 100 newlines at the top of the file so that "view source" was apparently blank (if you didn't notice the scrollbar)

  • (disco) in reply to JBert
    JBert:
    Firefox and Internet Explorer 11 installs also have hacker tools

    Company browser is now IE6. Any employee caught using anything else or installing web developer tools will be instantly terminated and handed over to the federal police for hacking and other computer crimes.

  • (disco) in reply to Zemm

    Great way for a company to commit suicide :<!---->)

  • (disco) in reply to Zemm
    Zemm:
    installing web developer tools

    ITYM hacking software. Web developer tools are A Good Thing because they produce web code. <!-- and are total tools.-->

  • (disco) in reply to accalia
    accalia:
    Don't make me go back to those places!

    But you keep coming back here every day. You're a sucker for abuse, admit it…

  • (disco) in reply to Yamikuronue
    Yamikuronue:
    Web developer tools are A Good Thing because they produce web code.

    No, they enable hacking into the web code. IE7+ and other browsers have it built-in so they must be made by hackers and therefore insecure!

  • (disco) in reply to accalia
    accalia:
    /me runs away sobbing
    \*is late, but offers :hug: anyway*

    To avoid exposing code to users, further web development and testing involving Chrome was suspended company-wide.

    Because as we all know, if you don't test on Chrome, it magically won't be a problem :headdesk:

  • (disco)

    I shouldn't laugh.

    That's what I say to myself when I see someone taking a hilariously embarrassing pratfall.

    No, I (tee hee) seriously (hee hee hee) shouldn't (haw haw haw) ... it's not (hoo hoo hoo har har har har) funny, (snork snigger snarf) it really isn't (ha ha haar boo hoo hoo hoo), look stop it (parp splat) oh bother.

    I'm taking the afternoon off, I'll work from home the rest of the day, I've er, got a personal problem.

  • (disco) in reply to RaceProUK

    I think they just stopped releasing the website for Chrome users.

  • (disco) in reply to Quite
    Quite:
    I've er, got a personal problem

    That's rather clear.

  • (disco)

    Banning Chrome is wrong, as this order cannot stop users from using the F12 hacking feature!

    The "Real Solution" is to force all users to use some custom inhouse developed app where they could browse all the company stuff safely!

    In 21st century there is no need to have website. Google Play and Apple App Store is just enough! Many apps are not available as a website - see WhatsApp. Milions of users, just the app, website has download button only.

  • (disco)

    I'm getting a bit of a suburban myth vibe here.

  • (disco) in reply to accalia
    accalia:
    The use of javascript to define "custom" tags so that no one could look at the source and know what <skrftlqwyprts href="https://what.thedailywtf.com/t/website-hacker/54674/10">click here!</skrftlqwyprts> was supposed to be!

    Sounds like Angular.

  • (disco) in reply to accalia
    accalia:
    The use of javascript to define "custom" tags so that no one could look at the source and know what `<skrftlqwyprts href="https://what.thedailywtf.com/t/website-hacker/54674/10">click here!</skrftlqwyprts>` was supposed to be!
    Hmm... would that be why some sites are just white pages until I turn scripting on? If so, I have a little friend I want to introduce them to: [image]

    I really need to meme-ify that...

  • (disco) in reply to CatPlusPlus
    CatPlusPlus:
    Sounds like Angular.

    ..... angular creates custom tags?!

    That's.... that's....... @raceprouk, can i borrow your hammer? i have to go visit some developers whose heads need to be nailed to the coffee table

  • (disco)

    It's "testers" like this that make me consider supporting forced sterilization/euthanasia. We cannot let the stupidity procreate/proliferate

  • (disco) in reply to accalia
    accalia:
    @raceprouk, can i borrow your hammer?
    What's mine is yours; all I ask is you clean the viscera off before you return it
  • (disco) in reply to RaceProUK

    Actually i was planning on leaving it at :doing_it_wrong:'s place and then calling INTERPOL with an anonymouse tip so they find the "smoking gun" at :doing_it_wrong:'s place and not ours.

  • (disco) in reply to accalia

    While a good idea on paper, I fear the design of the hammer is too distinctive for the plan to work...

  • (disco) in reply to RaceProUK
    RaceProUK:
    While a good idea on paper, I fear the design of the hammer is too distinctive for the plan to work...

    ahh.... then can i borrow twenty quid for a standard claw hammer at the local handyshop?

  • (disco) in reply to accalia
    accalia:
    twenty quid
    Sure: [image]

    *gives @accalia a real £20 note*

  • (disco) in reply to accalia
    accalia:
    ..... angular creates custom tags?!

    Yep. Its core is built around custom attributes, but it supports custom tags. The entire thing of how Angular works is that it rips the DOM out of the browser and rebuilds it using its own internal version of the DOM. That's how all of its "magic" is supplied.

  • (disco) in reply to Remy
    Remy:
    The entire thing of how Angular works is that it rips the DOM out of the browser and rebuilds it using its own internal version of the DOM. That's how all of its "magic" is supplied.

    /me scratches angular off the list of frameworks she's willing to work with.

    sorry, but if you make your framework such that it cannot degrade gracefully in the absence of JS then i ain't touching it.

    and let me tell you, custom tags do exactly that.

  • (disco) in reply to JBert
    JBert:
    Maybe they should check the user agent so that only Links is allowed.
    Won't help. Links and even Lynx can display the HTML source. Hackers have taken over the world. Run! ;)
  • (disco) in reply to JBert
    JBert:
    Oh no, seems my Firefox and Internet Explorer 11 installs also have hacker tools!

    Maybe they should check the user agent so that only Links is allowed.

    TIL that when talking about browsers, "Links" is not "Lynx" spelled by people who don't know anything.

    They should allow Lynx as well as Links. (Now, say that out loud and expect it to make sense. I love homophonic words!)

    EDIT: BAH, :hanzo:ed by @spezialpfusch ...

  • (disco) in reply to spezialpfusch

    What about cURL? Or what about TELNET? A 1337 enough h4x0r can extract HTML code from our precious highly secure but publicly available web server using TELNET!

    We're screwed!!!!1!

  • (disco) in reply to Hasteur
    Hasteur:
    It's "testers" like this that make me consider supporting forced sterilization/euthanasia. We cannot let the stupidity procreate/proliferate

    When quantum mechanics was first proposed as a model for the universe at small scales, the question was asked: "How will we change the minds of all the old physicists to accept this new (indubitably more accurate) model?" The answer eventually came back: you can't. You just have to wait for them to die.

  • (disco) in reply to Quite
    Quite:
    You just have to wait for them to die.

    Yeah, but I think @Hasteur was proposing “accelerated waiting”…

  • (disco)

    And that is why you don't hire idiots for testers, as not only do they fail at doing their job, they do stuff like this. TS:DR: Companies hiring idiotic and stupid testers are the real WTF

  • (disco) in reply to XanderTheGamer
    XanderTheGamer:
    TS:DR: Companies hiring idiotic and stupid testers are the real WTF

    FTFY<gg>

  • (disco) in reply to accalia
    accalia:
    angular creates custom tags

    It's not as bad as you think. You would define some <fancy-custom-tag /> and it turns into

    <fancy-custom-tag>
  <p>
    whatever normal html (or other angular directives that turn into normal html) is in the template
  </p>
</fancy-custom-tag>

    in the DOM.

    accalia:
    if you make your framework such that it cannot degrade gracefully in the absence of JS then i ain't touching it

    It's a framework for web-apps, not static text.

  • (disco)

    If it happened to me, the first thing I'd do is file a ticket about Firefox having "hacker tools" too. Wait and repeat every few days for every other browser I can think of, starting from the most popular. Then watch how the company goes out of business because it cannot use any web browser at all.

  • (disco) in reply to hungrier
    hungrier:
    It's not as bad as you think.

    does the site work at all with noscript? or do i get a white screen?

    because if i can get a whitescreen with noscript your framework is broken and it should feel bad.

  • (disco) in reply to Remy
    Remy:
    The entire thing of how Angular works is that it rips the DOM out of the browser and rebuilds it using its own internal version of the DOM.
    ewwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv

    I ran out of ws

  • (disco)

    Cbuttic case of Shoot the Messenger.

    TRWTF is nobody of the C level asking a technician they trust (or even not knowing any technician they trust).

    In any group, you can reckon with 2% of Idiot Ball players.

    Edit: Why not outwit those pesky hackers by catching all function keys and Ctrl key combinations with JavaScript? (As we see on this very site, that's :doing_it_right:™)

  • (disco) in reply to dkf
    dkf:
    XanderTheGamer:
    TS:DR: Companies hiring idiotic idiocy and stupidity testers are the real WTF

    FTFY<gg>

    FTFTFYFY

  • (disco) in reply to martin
    martin:
    website has download button only.

    But even that button is vulnerable to being hacked by the F12 exploit, and then it will download things to our users' computers and phones! We just need to have am aggressive marketing campaign for the app instead of any website.

  • (disco) in reply to RaceProUK
    RaceProUK:
    Hmm... would that be why some sites are just white pages until I turn scripting on? If so, I have a little friend I want to introduce them to: [image]

    Is that supposed to be a banhammer? It doesn't have nearly enough sharp pokey bits to be a cluebat.

  • (disco) in reply to Dragnslcr

    It's proper name is the Piko Hammer; despite the name, it's actually quite large

  • (disco) in reply to PWolff
    PWolff:
    TRWTF is nobody of the C level asking a technician they trust (or even not knowing any technician they trust).

    They did. His name is Charlie. Being trusted by an executive does not make someone correct. Honestly, I wouldn't be surprised if there's a negative correlation.

Leave a comment on “Website Hacker”

Log In or post as a guest

Replying to comment #:

Log Out

« Return to Article