What Bypassing Razer's DOM-Based XSS Patch Can Teach Usedoverflow.com2 points·by bobross·4 года назад·0 comments
What's the shortest domain? – Unicode Hacking and Tricksyoutube.com2 points·by bobross·6 лет назад·0 comments
How easy is it to tweet as anyone? – Twitter Hacks and Bug Bountyyoutube.com1 points·by bobross·6 лет назад·0 comments
How easy is it to tweet as somebody else? – Twitter Hacks and Bug Bountyyoutube.com2 points·by bobross·6 лет назад·0 comments
Samesite by Default and What It Means for Bug Bounty Huntersblog.reconless.com2 points·by bobross·6 лет назад·0 comments
Cursor Hijacking to make Twitter user appear like another usertwitter.com2 points·by bobross·7 лет назад·0 comments
Cursor Hijacking to make Twitter user appear like Elon Musktwitter.com2 points·by bobross·8 лет назад·0 comments
UI redressing to make Twitter user appear like Elon Musktwitter.com2 points·by bobross·8 лет назад·0 comments
bobross·5 лет назад·discussVPN browser extensions are merely proxies and most likely will leak you IP/privacy. I've written a blog post on this topic: https://blog.innerht.ml/vpn-extensions-are-not-for-privacy/
bobross·8 лет назад·discussClickjacking works without JavaScript assuming the targeted site works without JavaScript. HTML and CSS suffice.
bobross·8 лет назад·discussTo me Likejacking is more like harvesting organic likes. And YOLO leaks email address which is PII.
bobross·8 лет назад·discussNo, it was the full email. Besides, I've tried to suggest a fix by prompting first time users but it's been ignored for a week.
bobross·8 лет назад·discussActually Google temporarily shuts down the service as I've tried changing API keys/domains but received the same error
bobross·8 лет назад·discussThis is what you would see if it still worked:https://twitter.com/LiveOverflow/status/994560352149999616