On: OpenSSL.org hacked?

[devdoomari]

but what if they set-up the server side so that the server returns different results depending on the browser/OS?

[dangrossman → devdoomari]

    $ curl -A "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36" www.openssl.org

[bengarvey → dangrossman]

But what if they return a joke, so funny, that it kills whoever reads it?

[dionyziz → bengarvey]

https://en.wikipedia.org/wiki/Death_from_laughter

[mrjaeger → bengarvey]

Then they should split on spaces and only read one word at a time

[HCIdivision17 → mrjaeger]

This is a proven method, but care must be taken to make sure no individual gets more than on word to translate at a time.

https://en.m.wikipedia.org/wiki/The_funniest_joke_in_the_wor...

[rst → devdoomari]

They might be looking for client addresses of specific targets. Then again, if they were trying for a "bank shot" attack on some particular target, they almost certainly wouldn't be trashing the front page to let the world know that the whole site is compromised.