<story><title>Ask HN: Has Hacker News been hacked/cracked?</title><url></url><text>It seems like you can change the about field under PG&apos;s account http://news.ycombinator.org/user?id=pg using this appjet app
http://notabank.appjet.net/</text></story><parent_chain></parent_chain><comment><author>pg</author><text>Yes.  I made an unbelievably stupid mistake in the code that generates forms with labelled fields.  It was basically functional programming taken a little too far: I generated the same form whether the fields were editable or not, and then later if there were no editable fields I just omitted the submit button.  So anyone looking at the source of one of these pages could find a fnid that would work to modify the object displayed on it.  (There&apos;s still a fnid, but it no longer does anything.)</text></comment>
<story><title>Ask HN: Has Hacker News been hacked/cracked?</title><url></url><text>It seems like you can change the about field under PG&apos;s account http://news.ycombinator.org/user?id=pg using this appjet app
http://notabank.appjet.net/</text></story><parent_chain></parent_chain><comment><author>joshuaxls</author><text>Yes, it was hacked. Here&apos;s the original post from a lesser hack earlier today with pg&apos;s response containing the &quot;not a bank&quot; quote:&lt;p&gt;&lt;a href=&quot;http://news.ycombinator.org/item?id=518752&quot; rel=&quot;nofollow&quot;&gt;http://news.ycombinator.org/item?id=518752&lt;/a&gt;</text></comment>