Hacker News new | ask | show | jobs
by cmeacham98 1379 days ago
Cool idea, but please get an HTTPS cert - they're free!
2 comments
clayloam 1379 days ago
I was planning on getting that set up, but people discovered it faster than anticipated :) I’ll do it soon
link
londons_explore 1379 days ago
Not using HTTPS opens up a bunch of new possibilities of how to cheat...

Can you send an http request spoofing the IP address it's from? I bet you could with enough attempts because you only have to successfully guess the TCP syn cookie once...

link