Comment on Show HN: A Way To Hack HN's KarmaComments−citricsquid14yI had always assumed this was impossible because my votes have an auth key attached. Does this mean that the auth key is not used and is just there to trick casual observers into thinking there is security? vote?for=3742852&dir=up&by=citricsquid&auth=478876d54494692615d9f2ca184fa9fab2fb9ff7&whence=%69%74%65%6d%3f%69%64%3d%33%37%34%32%37%34%32−jpulgarin14yThat parameter is absent when you're not logged in.−kwamenum8614yI'm guessing this security hole is a regression because I could have sworn I tried this before. But I don't remember for certain.−wglb14yThis is for the comment votes; it looks like the vote for articles doesn't have a token.
Comments
I had always assumed this was impossible because my votes have an auth key attached. Does this mean that the auth key is not used and is just there to trick casual observers into thinking there is security?
That parameter is absent when you're not logged in.
I'm guessing this security hole is a regression because I could have sworn I tried this before. But I don't remember for certain.
This is for the comment votes; it looks like the vote for articles doesn't have a token.