bobross

5 ms·

1.
What Bypassing Razer's DOM-Based XSS Patch Can Teach Us(edoverflow.com)
2 points by bobross 5y ago|0 comments
2.
by bobross 5y ago
VPN browser extensions are merely proxies and most likely will leak you IP/privacy. I've written a blog post on this topic: https://blog.innerht.ml/vpn-extensions-are-not-for-privacy/
3.
What's the shortest domain? – Unicode Hacking and Tricks(youtube.com)
2 points by bobross 6y ago|0 comments
4.
by bobross 6y ago
I love the concept and the user interface very much!
5.
How easy is it to tweet as anyone? – Twitter Hacks and Bug Bounty(youtube.com)
1 points by bobross 6y ago|0 comments
6.
How easy is it to tweet as somebody else? – Twitter Hacks and Bug Bounty(youtube.com)
2 points by bobross 6y ago|0 comments
7.
by bobross 6y ago
Any tips for people like me who have flat feet?
8.
Samesite by Default and What It Means for Bug Bounty Hunters(blog.reconless.com)
2 points by bobross 7y ago|0 comments
9.
The Cookie Monster in the Browsers(speakerdeck.com)
4 points by bobross 7y ago|0 comments
10.
VPN Service(thewirecutter.com)
1 points by bobross 7y ago|0 comments
11.
Cursor Hijacking to make Twitter user appear like another user(twitter.com)
2 points by bobross 8y ago|0 comments
12.
Cursor Hijacking to make Twitter user appear like Elon Musk(twitter.com)
2 points by bobross 8y ago|0 comments
13.
UI redressing to make Twitter user appear like Elon Musk(twitter.com)
2 points by bobross 8y ago|0 comments
14.
VPN Extensions are not for privacy(blog.innerht.ml)
1 points by bobross 8y ago|0 comments
15.
VPN Extensions are not for privacy(blog.innerht.ml)
1 points by bobross 8y ago|0 comments
16.
A guide to subdomain takeovers(hackerone.com)
4 points by bobross 8y ago|0 comments
17.
by bobross 8y ago
Clickjacking works without JavaScript assuming the targeted site works without JavaScript. HTML and CSS suffice.
18.
by bobross 8y ago
To me Likejacking is more like harvesting organic likes. And YOLO leaks email address which is PII.
19.
by bobross 8y ago
No, it was the full email. Besides, I've tried to suggest a fix by prompting first time users but it's been ignored for a week.
20.
by bobross 8y ago
Nothing
21.
by bobross 8y ago
Actually Google temporarily shuts down the service as I've tried changing API keys/domains but received the same error
22.
by bobross 8y ago
You could still convince users to do a double click, no?
23.
by bobross 8y ago
This is what you would see if it still worked: https://twitter.com/LiveOverflow/status/994560352149999616
24.
Google YOLO clickjacking(blog.innerht.ml)
1304 points by bobross 8y ago|229 comments