undefined | Better HN

0 pointsentropyneur13y ago0 comments

Well, if it's a spam bot that creates Pinterest user accounts then one would obviously be able to log in to those accounts.

0 comments

2 comments · 2 top-level

amccloud13y ago

I think it's used to manage accounts and could be used for spam. The giveaway is the form asking for csrf token and session id; both required for Django to authenticate and accept a POST request.

Uchikoma13y ago

Didn't think about that, you're right.

j / k navigate · click thread line to collapse