Is NING Hackable?

[Petko D. (pdp) Petkov]

Sure, it is! But it was the right choice for our needs. When House of Hackers started there were no expectations whether it will lift off. It was an experiment and for that reason we thought that if it fails we can just shut it down or leave it be without further attending it. Another important factor which led us to choose NING was the we could help secure it. We brag about how bad social networks are and how many vulnerabilities they have but we never improve the situation. So, by using this insecure software for our needs, we thought that it will be natural for us to make it better and as such improve our karma. :)

So, yes! NING is hackable but it is getting better thanks to the many security professionals on this network who find vulnerabilities within the software on a daily basis.

[Raavenkroft]

http://houseofhackers.org/group/hungarianhackers/forum/topic/show?id=2092781%3ATopic%3A34970

[Petko D. (pdp) Petkov]

yep. I am aware of it as well as NING is aware of it for some time now. waiting for fixes. :)

[Raven]

I like the idea of not only using the platform, but also improving it while we're at it! Is ning connected to the google opensocial (or whatever) code/network? That would be the most interesting part, since it can be used on multiple snetworks.

@Raavenkroft : Is there any way to translate information in the link? I think it would be much easier if significant articles could be published in English so everybody can use it. (perhaps a subject on the language topic >> HoH forum)

[fragge]

>_> they are open to directory traversal all the way to root.. bad..

[Demagog D'Hogg™ (Join DemagogzSty.Ning.com)]

Yea it is