Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If his login username is `sbf`, the second condition would never be hit. Maybe you meant to write `&&`?


No, the first conditional checks if the logged-in user is allowed to access the account by ensuring that the the user and account match.

OR, if the user is sbf, they always have access regardless of which account it is.

That said this wouldn't really set up a line of credit but it is a way to give one user access to everyone's stuff.


My point is that the first check would be true because the user is already sbf.


Assuming he’s using his own account.

The joke is he was using all the accounts.


The first comparison is checking the ID so the rightful owner has access. The second comparison (unless it's been edited since you posted your comment) is checking the username against 'sbf'.


The premise is he's accessing other users accounts. "If the account being accessed belongs to the logged in user, or the logged in user is sbf."


Huh? (false || true) === true


My point is that (true || true) === true


(true || true) is the front door; (false || true) is the back door


Why would he use something other than sbf as his primary account?


The joke is that he is spending money from other people's accounts.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: