Wednesday, November 03, 2010

Thanks, hackers! (in both senses of the word)

Since reddit is a great big open source project, we get code contributions every now and then. We really like when this happens, and in fact, have an award for it. Here are the latest recipients:
  • Preston4tw sent in a patch that lets you see recent comments on a particular reddit by going to /r/(something)/comments.
  • reseph sent in a patch that makes the name of a reddit into a clickable link in the sidebar.
  • shortkud sent in a patch that fixed a bug in our RSS feeds.
  • cookiecaper sent in a patch that fixed a bug in reddit-powered sites other than reddit.com.
  • Markus Gaisbauer sent in a patch that lets reddit developers test their site by generating lots of gibberish comments. (Insert joke here.)

We also have an award for people who responsibly report a security issue in reddit — in other words, they quietly and privately message the reddit staff, without telling anyone else. Two recent winners:
  • boraca realized that it was sometimes possible to see things you shouldn't be able to by combining reddits, like /r/foo+bar.
  • bballbackus told us about an XSS vulnerability we had.
I want to reiterate: the white hats are for discreetly telling us about security problems, not for finding them in the first place. You get no hat if you brag about it before we get a chance to fix it.
discuss this post on reddit