Neocities.org
why do people see things as "more secure" once it's seems like said thing has a sufficiently large community? people would always try pulling XSS attacks on boards back when it was new, but now they see 50 pages and are like "oh, yeah, this site is pretty large... probably secure enough not to fall for an attack like this"
7 likes
this is a huge security vulnerability in the human mind. please patch this with the next update.
nah keep it its funny
i should attack neocities.org
kyle drake give me fucking supporter!!!
@graybox im not sure XD, I'd assume it's because they think that many people are actively watching for bugs or will report it so quickly that it'll be shut down before anything major can happen, but I've noticed this not to be the case many times.
One time a couple of months ago on BitView (my most famous account is here) some user named idontmind used XSS to leak login cookies and grant access to an admin account to change the contest to "real". It wasn't until a few hours later that hacked accounts would direct them to an XSS filled playlist and gained access to a large portion of accounts and killed the site for 2 days.