« first day    last day (16 days later) » 

user3956566
1:44 AM
@shoover good question. Extensive
 
6:33 AM
@KlomDark To be quite frank, if ren is offended by the suggestion that a high traffic website should be secure, then the problem is theirs, not mine. I've said many times that when security is at stake, there is no shame in seeking help where there are gaps in your knowledge. In fact, doing so is responsible and admirable. The opposite, refusing to do so, is just stubborn and disrespectful to your users.
Furthermore, I literally suggested seeking help from the SO community. I'm quite certain a couple people would be willing to step up and help secure the site. It's possible ren may need help not just with the code, but with the server configuration as well. There is no shame in getting the help you need to protect others from gaps in your knowledge.
This idea that getting help when you lack knowledge is "offensive" is also completely contrary to SO's core mission.
 
 
7 hours later…
2:01 PM
@jpmc26 That's probably a response to the "irresponsible" part instead of "getting help" part.
@CGriffin About "casual attitude": It looks like that the OP is serious about fixing the exploit, just casual in the writing of the meta post.
22 hours ago, by DavidG
I think people need to calm down a little. It seems to me that @ren is taking this hack seriously but using it as a fun learning exercise while taking the hack itself as a non-trivial event. Seems like a mature attitude to me.
@deW1 About "If you can't do that and aren't willing to get people that can, you shouldn't be running a website": As far as I can see, rextester has no guarantee that it's going to be safe.
 
 
1 hour later…
3:26 PM
@user202729 You're not understanding. If the site has been hacked several times, the whole thing needs review by someone who knows what they're doing. The system needs to be hardened now, not have one vulnerability patched every time when someone manages to hack the site.
@user202729 And if rextester can't promise some level of safety, then we shouldn't be linking to it. There's no "do nothing" answer here. Either the site gets hardened up to an appropriate level for the kind of traffic we're sending to it, or we start editing out links.
 
3:44 PM
Regarding testing sites: we may want to have a whitelist for "safe" sites, so this (hopefully) won't repeat in the future.
@jpmc26 The latter, I guess.
 
4:30 PM
@user202729 running a public website comes with responsibilities. See GDPR, Privacy Shield etc.. When your website gets repeatedly hacked and you don't get help and contact authorities. You're not acting in the users best interests, therefore SO shouldn't advertise sites like these. I never said if you can't secure your website don't run it, I said if you can't do it and don't get help... (how people see get help as paying someone to secure it is beyond me)
 
4:48 PM
Ok, I will check that.
However, it's the users who "advertised" it.
If anyone think removing all links is a good idea then just upvote the corresponding answer.
However it looks like that this one is currently not very well-received...
 

« first day    last day (16 days later) »