What Bypassing Razer's DOM-Based XSS Patch Can Teach Usedoverflow.com2 points·by bobross·il y a 4 ans·0 comments
What's the shortest domain? – Unicode Hacking and Tricksyoutube.com2 points·by bobross·il y a 6 ans·0 comments
How easy is it to tweet as anyone? – Twitter Hacks and Bug Bountyyoutube.com1 points·by bobross·il y a 6 ans·0 comments
How easy is it to tweet as somebody else? – Twitter Hacks and Bug Bountyyoutube.com2 points·by bobross·il y a 6 ans·0 comments
Samesite by Default and What It Means for Bug Bounty Huntersblog.reconless.com2 points·by bobross·il y a 6 ans·0 comments
Cursor Hijacking to make Twitter user appear like another usertwitter.com2 points·by bobross·il y a 7 ans·0 comments
Cursor Hijacking to make Twitter user appear like Elon Musktwitter.com2 points·by bobross·il y a 8 ans·0 comments
UI redressing to make Twitter user appear like Elon Musktwitter.com2 points·by bobross·il y a 8 ans·0 comments
bobross·il y a 5 ans·discussVPN browser extensions are merely proxies and most likely will leak you IP/privacy. I've written a blog post on this topic: https://blog.innerht.ml/vpn-extensions-are-not-for-privacy/
bobross·il y a 8 ans·discussClickjacking works without JavaScript assuming the targeted site works without JavaScript. HTML and CSS suffice.
bobross·il y a 8 ans·discussTo me Likejacking is more like harvesting organic likes. And YOLO leaks email address which is PII.
bobross·il y a 8 ans·discussNo, it was the full email. Besides, I've tried to suggest a fix by prompting first time users but it's been ignored for a week.
bobross·il y a 8 ans·discussActually Google temporarily shuts down the service as I've tried changing API keys/domains but received the same error
bobross·il y a 8 ans·discussThis is what you would see if it still worked:https://twitter.com/LiveOverflow/status/994560352149999616