That company whose name used to contain HTML script tags Ltd(find-and-update.company-information.service.gov.uk) |
That company whose name used to contain HTML script tags Ltd(find-and-update.company-information.service.gov.uk) |
Relevant discussion on the Companies House Developer Forum:
https://forum.aws.chdev.org/t/cross-site-scripting-xss-softw...
Not to be confused with the equally inspired https://find-and-update.company-information.service.gov.uk/c...
a) Incorporate directly via Companies House
The standard registration fee to set up a company is just £12 for the ‘standard’ Companies House web incorporation service, which takes up to 24 hours to turnaround. You can pay via credit card, debit card or PayPal.
Source: https://www.itcontracting.com/how-much-limited-company-cost/
One day, they get a new customer called "Select". Absolutely everything stopped working.
Apparently the name used to be
\"><SCRIPT SRC=MJT.XSS.HT></SCRIPT> LTD \"><SCRIPT SRC=MJT.XSS.HT></SCRIPT> LTD/* THIS SUBDOMAIN HAS BEEN BANNED FROM THE XSS HUNTER SERVICE.
WE DO NOT ALLOW ABUSE OF OUR SERVICE, ALL SECURITY TESTING MUST BE AUTHORIZED.
Please use our contact form if you believe this ban was a mistake: https://xsshunter.com/contact */
Tried it in chrome and sees it as a file name on the current domain.
...
>I am in the process of contacting every website that has triggered my script which has a readily available contact for submitting security issues, or a hackerone account or similar. Alas, the sort of websites that have XSS problems rarely list IT security contacts.
^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\?([^#]*))?(#(.*))?
The authority section (which contains the host domain) must begin with "//" whether there's a scheme prefix or not. Otherwise it's just part of the path (or query or fragment). IIRC, these semantics are also fixed by HTML such that any attribute like HREF or SRC is parsed as-if using the canonical regex (but after entity substitution and whitespace trimming). Browsers might have implemented this differently many years ago, but I doubt it as it would conflict with being able to use a bare path atom (e.g. foo.html).
[1] I normally eschew using regular expressions for proper parsing, but for URLs the canonical expression is both adequate and advisable for correctness.
So if you're gonna Google it, don't use the URL bar.
For example you can use the characters w,i,n,d,s,o,r but catenated in an ordered string means you have to get special permission.
Arguably the attempt to register this was an attempt to breech the Computer Misuse Act (which would make it illegal).
Dariusz Jakubowski x'; DROP TABLE users; SELECT '1
[0] https://prod.ceidg.gov.pl/CEIDG/ceidg.public.ui/SearchDetail... (check the reCAPTCHA and click "Dalej")
Seems like a regulation to add "computer code like expressions" to the list that requires prior approval of the Secretary of State might be useful.
On that point though, searching on the UK trademark registry it looks like it just strips non-alphanumeric symbols. A search for "Moz://a” returns "moza".
(Yes, the description is inaccurate.)
Edit: This is a different company, actually.
See also "BETTS & TWINE LTD" https://find-and-update.company-information.service.gov.uk/c...
SAFDASD & SFSAF \' SFDAASF\" LTD https://find-and-update.company-information.service.gov.uk/c...
[1]: https://forum.aws.chdev.org/t/cross-site-scripting-xss-softw...
Not saying they were compromised.
Those are both funny and confusing names, but they don’t warrant comparison to sql-injections, so I am guessing there’s another name with actual HTML tags.
I've started working with some software called STACK recently, and it's almost impossible to find anything by searching (go ahead and try!). If it was a commercial product they would be sunk.
Even if I google ":different" company or without the colon, top results for me is a parfumerie.
When I google different australia, you're the top result.
I've started using Apple's Aperture software recently (I'm well aware it's been discontinued). I really like it, but my biggest frustration is that it's difficult to learn how to do new things, because "aperture" is a generic word in photography. I can't search for the name and get results about the software.
The creator mentioned that he picked the names because they were pronounceable, unique, memorable, and searchable. That misses out on meaningfulness and familiarity, but those are expensive - by dropping those requirements, you gain easy SEO, trademarks, domains, etc. A big company knowing they're going to sell millions of copies can spend 5 figures on a domain and 6 figures on SEO, but I don't think it's worth it for most startups.
Limiting the dates to indexes before 2016 might help (at least with google). You can usually train google to get you what you want after a few searches. This was initially a problem with the Elixir programming language, but it learned what I actually wanted it started letting me just type in the term elixir without specifying it was a programming language. On other computers not associated with that account, it does revert back to the not-so-useful results.
e.g.
apple "aperture" color correction before:2016Apple don't give a fuck.
It was usually musical albums that liked to have names that made it impossible for fans to find the music.
The band 'Audiobooks' has taken this to the next level
You’ll never find them on YouTube or google unless you search for their informal name: chk chk chk
Terrible Google SEO, great accidental Apple SEO.
They provide data feeds to many third parties, who might themselves be vulnerable, hence the notification.
Oh, you know what, this might be largely my own fault. I purposefully use Startpage.com as my search engine in order to avoid getting customized results (while still using Google's index).
I worry that customized results put me in a filter bubble—but they certainly have their advantages!
(Or for a more modern example "!!!")
Also relevant: "Change Your Name" http://www.paulgraham.com/name.html
(Spam warning: if you form a company at your home address, you will be inundated with paper spam for office equipment. Especially from Dell.)
I also had a letter telling me I was the beneficiary of a few million dollars which was less useful :)
Issues such as what that company does after incorporation are another matter.
𝗨𝗻𝗶𝗰𝗼𝗱𝗲 𝗵𝗮𝘀 𝗰𝗵𝗮𝗿𝗮𝗰𝘁𝗲𝗿𝘀 𝘁𝗵𝗮𝘁 𝗹𝗼𝗼𝗸 𝘀𝗶𝗺𝗶𝗹𝗮𝗿 𝘁𝗼 𝗳𝗼𝗿𝗺𝗮𝘁𝘁𝗲𝗱 𝘁𝗲𝘅𝘁.
𝑈𝑛𝑖𝑐𝑜𝑑𝑒 ℎ𝑎𝑠 𝑐ℎ𝑎𝑟𝑎𝑐𝑡𝑒𝑟𝑠 𝑡ℎ𝑎𝑡 𝑙𝑜𝑜𝑘 𝑠𝑖𝑚𝑖𝑙𝑎𝑟 𝑡𝑜 𝑓𝑜𝑟𝑚𝑎𝑡𝑡𝑒𝑑 𝑡𝑒𝑥𝑡.
𝘜𝘯𝘪𝘤𝘰𝘥𝘦 𝘩𝘢𝘴 𝘤𝘩𝘢𝘳𝘢𝘤𝘵𝘦𝘳𝘴 𝘵𝘩𝘢𝘵 𝘭𝘰𝘰𝘬 𝘴𝘪𝘮𝘪𝘭𝘢𝘳 𝘵𝘰 𝘧𝘰𝘳𝘮𝘢𝘵𝘵𝘦𝘥 𝘵𝘦𝘹𝘵.
𝑼𝒏𝒊𝒄𝒐𝒅𝒆 𝒉𝒂𝒔 𝒄𝒉𝒂𝒓𝒂𝒄𝒕𝒆𝒓𝒔 𝒕𝒉𝒂𝒕 𝒍𝒐𝒐𝒌 𝒔𝒊𝒎𝒊𝒍𝒂𝒓 𝒕𝒐 𝒇𝒐𝒓𝒎𝒂𝒕𝒕𝒆𝒅 𝒕𝒆𝒙𝒕.
𝙐𝙣𝙞𝙘𝙤𝙙𝙚 𝙝𝙖𝙨 𝙘𝙝𝙖𝙧𝙖𝙘𝙩𝙚𝙧𝙨 𝙩𝙝𝙖𝙩 𝙡𝙤𝙤𝙠 𝙨𝙞𝙢𝙞𝙡𝙖𝙧 𝙩𝙤 𝙛𝙤𝙧𝙢𝙖𝙩𝙩𝙚𝙙 𝙩𝙚𝙭𝙩.
(Don't do this: it's _terrible_ for accessibility, as screen readers can't parse these as regular text)
They probably exist, I just don't think I can ask a search engine to find them.
In 1997 Torsten Pröfrock released a highly sought-after dub techno album on the legendary Chain Reaction label under the name "Various Artists". It's a quintessential record in the Basic Channel genre. You can listen it here: https://youtu.be/3165Sf-q8dY
Relevant - John Mellencamp using his hit song to siphon off subsidies to his family and relatives.
https://reason.com/2005/04/15/cash-on-the-scarecrow-pork-on/
BASIC programming
* BASIC Programming : 7 Steps - Instructables
* Learn More - Just BASIC
* The History of the BASIC Programming Language
* Programming in BASIC: the absolute beginner tutorial
* FreeBASIC Language | Home
* PureBasic - A powerful BASIC programming language
* Quite BASIC — fun, learning and nostalgia
* World of Spectrum - Documentation - ZX Spectrum manual
Only after all that is a non-basic link
* Introduction | Programming for Beginners
𝐔𝐧𝐢𝐜𝐨𝐝𝐞 𝐡𝐚𝐬 𝐜𝐡𝐚𝐫𝐚𝐜𝐭𝐞𝐫𝐬 𝐭𝐡𝐚𝐭 𝐥𝐨𝐨𝐤 𝐬𝐢𝐦𝐢𝐥𝐚𝐫 𝐭𝐨 𝐟𝐨𝐫𝐦𝐚𝐭𝐭𝐞𝐝 𝐭𝐞𝐱𝐭.
I'm curious if that copied the text or the placeholders. It's like hunter2 for the modern era.
It copied the text.