Comment Spam 2.0

My last post created quite a buzz – and gathered all kinds of celebrities on my blog!

It all started with these few comments

Hola, Lead Architect from Digg here (…)
~Joe Stump

Founder of PBwiki here, (…)
~David Weekly

Hi – CTO of PBwiki here, (…)
~Nathan Schmidt

Followed by this one.

Hey – Tim Berners-Lee here, Creator of the World Wide Web. Keep up the good work.
~Tim Berners-Lee

I thought it was funny enough, so I didn’t delete it. Unfortunately Tim Berners-Lee attracted all kinds of other well known personalities, including Barrack Obama, Hillary Clinton, Bruce Waine, Clark Kent, the Flying Spaghetti Monster, God and others. I’ve saved a few of these comments here.

Read complete post »

How I hacked Digg

Two weeks ago I filed a bug report on Digg.com, explaining several XSS vulnerabilities and bugs I found. Some of these were (and some still are!) very critical. A day later, I got an automated response to my report:

We’ve contacted our development team who are investigating the issue, and will fix it as soon as possible.

All well and good I thought, but when a few days ago all vulnerabilities were still there, I decided to exploit one of them.

Read complete post »