‹ BackHN Continuity

Thread

How one Twitch chat message became code execution on a streamer’s PC

67 points · 30 comments · tau255

  1. hahn-kev · · focus · HN ↗
    It seems wild to me that Twitch doesn't sanitize the messages on their backend. I'm sure that they sanitize them on their own UI. But considering how many people also consume messages via their API, they should also sanitize for them, defense in depth and all.
    1. Ohentis · · focus · HN ↗
      I feel like trying to predict every way someone could fuck up a chat display is a fool's errand.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.