What Bypassing Razer's DOM-Based XSS Patch Can Teach Usedoverflow.com2 points·by bobross·4 lata temu·0 comments
What's the shortest domain? – Unicode Hacking and Tricksyoutube.com2 points·by bobross·6 lat temu·0 comments
How easy is it to tweet as anyone? – Twitter Hacks and Bug Bountyyoutube.com1 points·by bobross·6 lat temu·0 comments
How easy is it to tweet as somebody else? – Twitter Hacks and Bug Bountyyoutube.com2 points·by bobross·6 lat temu·0 comments
Samesite by Default and What It Means for Bug Bounty Huntersblog.reconless.com2 points·by bobross·6 lat temu·0 comments
Cursor Hijacking to make Twitter user appear like another usertwitter.com2 points·by bobross·7 lat temu·0 comments
Cursor Hijacking to make Twitter user appear like Elon Musktwitter.com2 points·by bobross·8 lat temu·0 comments
UI redressing to make Twitter user appear like Elon Musktwitter.com2 points·by bobross·8 lat temu·0 comments
bobross·5 lat temu·discussVPN browser extensions are merely proxies and most likely will leak you IP/privacy. I've written a blog post on this topic: https://blog.innerht.ml/vpn-extensions-are-not-for-privacy/
bobross·8 lat temu·discussClickjacking works without JavaScript assuming the targeted site works without JavaScript. HTML and CSS suffice.
bobross·8 lat temu·discussTo me Likejacking is more like harvesting organic likes. And YOLO leaks email address which is PII.
bobross·8 lat temu·discussNo, it was the full email. Besides, I've tried to suggest a fix by prompting first time users but it's been ignored for a week.
bobross·8 lat temu·discussActually Google temporarily shuts down the service as I've tried changing API keys/domains but received the same error
bobross·8 lat temu·discussThis is what you would see if it still worked:https://twitter.com/LiveOverflow/status/994560352149999616