What Bypassing Razer's DOM-Based XSS Patch Can Teach Usedoverflow.com2 points·by bobross·4년 전·0 comments
What's the shortest domain? – Unicode Hacking and Tricksyoutube.com2 points·by bobross·6년 전·0 comments
How easy is it to tweet as anyone? – Twitter Hacks and Bug Bountyyoutube.com1 points·by bobross·6년 전·0 comments
How easy is it to tweet as somebody else? – Twitter Hacks and Bug Bountyyoutube.com2 points·by bobross·6년 전·0 comments
Samesite by Default and What It Means for Bug Bounty Huntersblog.reconless.com2 points·by bobross·6년 전·0 comments
Cursor Hijacking to make Twitter user appear like another usertwitter.com2 points·by bobross·7년 전·0 comments
Cursor Hijacking to make Twitter user appear like Elon Musktwitter.com2 points·by bobross·8년 전·0 comments
UI redressing to make Twitter user appear like Elon Musktwitter.com2 points·by bobross·8년 전·0 comments
bobross·5년 전·discussVPN browser extensions are merely proxies and most likely will leak you IP/privacy. I've written a blog post on this topic: https://blog.innerht.ml/vpn-extensions-are-not-for-privacy/
bobross·8년 전·discussClickjacking works without JavaScript assuming the targeted site works without JavaScript. HTML and CSS suffice.
bobross·8년 전·discussTo me Likejacking is more like harvesting organic likes. And YOLO leaks email address which is PII.
bobross·8년 전·discussNo, it was the full email. Besides, I've tried to suggest a fix by prompting first time users but it's been ignored for a week.
bobross·8년 전·discussActually Google temporarily shuts down the service as I've tried changing API keys/domains but received the same error
bobross·8년 전·discussThis is what you would see if it still worked:https://twitter.com/LiveOverflow/status/994560352149999616