What Bypassing Razer's DOM-Based XSS Patch Can Teach Usedoverflow.com2 points·by bobross·4 वर्ष पहले·0 comments
What's the shortest domain? – Unicode Hacking and Tricksyoutube.com2 points·by bobross·6 वर्ष पहले·0 comments
How easy is it to tweet as anyone? – Twitter Hacks and Bug Bountyyoutube.com1 points·by bobross·6 वर्ष पहले·0 comments
How easy is it to tweet as somebody else? – Twitter Hacks and Bug Bountyyoutube.com2 points·by bobross·6 वर्ष पहले·0 comments
Samesite by Default and What It Means for Bug Bounty Huntersblog.reconless.com2 points·by bobross·6 वर्ष पहले·0 comments
Cursor Hijacking to make Twitter user appear like another usertwitter.com2 points·by bobross·7 वर्ष पहले·0 comments
Cursor Hijacking to make Twitter user appear like Elon Musktwitter.com2 points·by bobross·8 वर्ष पहले·0 comments
UI redressing to make Twitter user appear like Elon Musktwitter.com2 points·by bobross·8 वर्ष पहले·0 comments
bobross·5 वर्ष पहले·discussVPN browser extensions are merely proxies and most likely will leak you IP/privacy. I've written a blog post on this topic: https://blog.innerht.ml/vpn-extensions-are-not-for-privacy/
bobross·8 वर्ष पहले·discussClickjacking works without JavaScript assuming the targeted site works without JavaScript. HTML and CSS suffice.
bobross·8 वर्ष पहले·discussTo me Likejacking is more like harvesting organic likes. And YOLO leaks email address which is PII.
bobross·8 वर्ष पहले·discussNo, it was the full email. Besides, I've tried to suggest a fix by prompting first time users but it's been ignored for a week.
bobross·8 वर्ष पहले·discussActually Google temporarily shuts down the service as I've tried changing API keys/domains but received the same error
bobross·8 वर्ष पहले·discussThis is what you would see if it still worked:https://twitter.com/LiveOverflow/status/994560352149999616