Hacker GitHub

← All repos

haiwen/seahub

View on GitHub ↗ ★ 610 JavaScript

The web end of seafile server.

3 mentions on Hacker News by 1 person: 0 stories, 3 comments · first 2015-11-13 · latest 2021-01-22

Mentions per year 3 mentions · busiest year 2015 (2)
20082026
AllStoriesComments NewestTopOldest
  1. …flies. For example, they copied https://github.com/django/django/blob/23c612199a8aaef52c3c7e... to https://github.com/haiwen/seahub/blob/b6f8935c0f355cc70145f9... and removed some security-critical checks. They removed the check for the…
    comment by LukasReschke · 2021-01-22 · in ownCloud Infinite Scale: Go instead of PHP, microservices instead of LAMP
  2. …The green one is the "fix" :) The constant time comparison is pretty irrelevant here. Check https://github.com/haiwen/seahub/commit/7cdb70368aa7acbf0546... , basically a valid password reset token in default Django requires an attacker to…
    comment by LukasReschke · 2015-11-13 · in Self-hosted alternatives to popular cloud services
  3. …And SeaFile has additionally modified the default Django components making it more insecure: https://github.com/haiwen/seahub/commit/7cdb70368aa7acbf0546... By the way, ownCloud does run a Bug Bounty: https://hackerone.com/owncloud
    comment by LukasReschke · 2015-11-13 · in Self-hosted alternatives to popular cloud services