Skip to content

Comment on A real case of Bobby Tables?

Comments

There have been several companies like this.

Company 10542519 was named "; DROP TABLE "COMPANIES";-- LTD"

Company SC656788 is still named ROBERT'); DROP TABLE STUDENTS; LIMITED

Company 08768324 named DROP TABLE CONSULTANTS; LTD

And company 12956509 was named "><SCRIPT SRC=HTTPS://MJT.XSS.HT></SCRIPT> LTD (which you'll note works)

There have always been certain restrictions on company names [1] containing words like 'Police' or 'Financial Conduct Authority' and you can't even name your company 'Insurance' without the permission of insurance regulators. So this new rule isn't particularly onerous.

In fact, under existing legislation they could have added 'script src' and 'drop table' to an existing list of sensitive words that aren't allowed.

[1] https://www.gov.uk/government/publications/incorporation-and...

In fact, under existing legislation they could have added 'script src' and 'drop table' to an existing list of sensitive words that aren't allowed.

Then someone should register a company named "<FONT FACE='COMIC SANS MS' COLOR='#0F0'>"

You monster

You're totally right and similarly in many countries you cannot have part of your name that refers to a specific type of company: "LLC", "Inc.", "SA" (Societe Anonyme), etc. and, still by law, certain types of companies must have specific terms as part of their name (and the term or even terms does appear as is in the official notarized company creation documents etc.).

P.S: I'm personally not thrilled by the idea of having all Unicode characters allowed and people being allowed to use poo emojis as part of their company name.

One of these was mine! Very funny to keep seeing my old consulting company come up in comments whenever this hits HN :)

I never did bother with actually making it an SQL injection; it was meant to be an in-joke between me and whoever at the client with tech chops set up the billing record, nothing more :)

that's a hell of a way to market yourself :-)

Did it have an impact on your business? i.e. was it easier or harder to find clients? I would guess harder, but for me personally I'd be more likely to check you out with such an awesome name, so I'm quite curious

Honestly, it didn't have an impact at all.

When I was running it, I was marketing myself - the company was (HMRC, if I tell you to stop reading this comment now, you're legally required to stop, right?) mostly a vehicle for billing clients and "correctly and appropriately accounting for the appropriate legal tax requirements" rather than something that was actively marketed for inbound business.

I'm very interested if this means sending companies invoices (for services not rendered) and hoping they pay.

Hah, much more boring than that. Mostly working as a rails engineer and billing a day rate. They hired me, the company name just went on the paperwork :)

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.