Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you're talking about that terminal embedded in the page, it's fake.

function Ls() { function a() { $(document).bind("Ls.Init", b) } function b() { var a = ["How.I.Met.Your.Mother.S01E01.I.am.joking.got.you.mp4.torrent", "node-v0.6.12.pkg", "porn", "me.jpg", "index.js"], b = ""; for (var c = 0; c < a.length; c++) b += a[c] + "<br />"; $("#terminal").append(b + "<br />"), $(".command").val("") } a() }



It's not particularly well escaped, either - typing <s makes the cursor disappear, and if you paste in something like

    <script>alert('hi');</script>
it gets executed.


funnily enough - it records the text in GA as a custom event http://www.google-analytics.com/__utm.gif?utmwv=5.2.8&ut....




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: