Skip to content

Comment on Tarsnap email confirmation bypassparent

Comments

a friendly guy reported to tarsnap that you could sign up without needing the emailed confirmation link by creating that same confirmation link yourself with the cookie/token being hidden, but present in the HTML code.

That's a decent summary, but I didn't think I was all that long-winded...

Quite the opposite, it's nice to see someone put some effort into their write-ups. It's so much more readable as a story.

Oh it really is just a summary, and no commentary as to whether TFA was long-winded or not. That's left to decide for each individually.

When you write tl;dr followed by a very short summary, doesn't that itself imply that the article was long?

tl;dr has also become a general shorthand for a summary.

It's almost an abbreviation for summary!

The summary was certainly shorter than the article!

Maybe the guy who found the bug won't get $1000, according to your rules, but he definitely deserves a cookie.

Please don't turn this place into a pun-fest.

I did pay out a bounty of $200 for this.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.