Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
hackideiomat
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
11 ms
·
1.
▲
by
hackideiomat
3y ago
This android wallet has an internal browser and it incorrectly strips www. from hosts. This also affects their permission system, meaning this is the perfect bug to phish users. They didn't answer multiple mails in 30 days, so it'
2.
▲
Domain Spoofing Vuln in Status Android Wallet
(github.com)
3 points
by
hackideiomat
3y ago
|
1 comments
3.
▲
by
hackideiomat
3y ago
Don't get me wrong, I do use kagi. but it's not nearly what I wish it'd be.
4.
▲
by
hackideiomat
3y ago
Maybe MetaGer if you can live with their quality
5.
▲
by
hackideiomat
3y ago
Oh yes because of the CSP. The CSP that allows forms that can change your settings... you could easily use the above bug to get some impact with an additional click on a form's submit button. Admittedly, no full XSS anymore, but still
6.
▲
by
hackideiomat
3y ago
Go look at MetaGer, they solved that issue
7.
▲
by
hackideiomat
3y ago
Ha, exactly! They rarely fix bugs. E.g., XSS / HTML injection in summarizer or discuss document. Or their broken CSP which allows injecting forms to e.g., change settings. They haven't fixed many reported issues in a while, and ju
8.
▲
by
hackideiomat
3y ago
They do not take security and privacy seriously
9.
▲
by
hackideiomat
3y ago
I don't want that?
10.
▲
by
hackideiomat
3y ago
Well if you attack his friends, it's not okay, but if you go which death upon 'the leftists' he wouldn't say a thing, I bet
11.
▲
by
hackideiomat
3y ago
Dude can move so many millions around I'd shit my pants if he tells me to die slow.
12.
▲
by
hackideiomat
3y ago
oh man I didn't know I'd hate this guy :D
13.
▲
by
hackideiomat
3y ago
There's another tool like this called horcrux, which I find to be a better name personally.
14.
▲
by
hackideiomat
3y ago
=cmd|' /C calc'!A0
15.
▲
by
hackideiomat
3y ago
C is unsafe
16.
▲
by
hackideiomat
3y ago
Don't you ever care about upsetting people who live in countries with unreasonable gun laws. Especially third world countries like the US.
17.
▲
by
hackideiomat
3y ago
> a query for red shoes is mostly red shoes well I get mostly black shoes lol Edit: ah no, they just use half a page for shoe shops first with black shoes as logo??
18.
▲
by
hackideiomat
3y ago
Sending network packets. Like, I send you a big array of bytes and you write it to a small buffer and therefore I overwrite unintended data.
19.
▲
by
hackideiomat
3y ago
Right, there haven't been crazy Java exploits going around the past few months, only Rust and Go!
20.
▲
by
hackideiomat
3y ago
Switch to security :)
21.
▲
by
hackideiomat
3y ago
Especially because people didn't know ALL the effects. This is not just about static, but also how it impacts shots.
22.
▲
by
hackideiomat
3y ago
https://youtube.com/watch?v=pZ-hKmz4PIY
23.
▲
by
hackideiomat
3y ago
Lance made a video too, but in more detail: https://www.youtube.com/watch?v=GuqVUsMPs-U
24.
▲
by
hackideiomat
3y ago
You can use a wet spoon handle
25.
▲
by
hackideiomat
3y ago
Just chiming in to mention that xylitol seems to have a beneficial effect, similar to what this sounds like, though very different mechanism.
26.
▲
by
hackideiomat
3y ago
Do you still use other search engines? You should start to do your everyday searches on both and compare the results. For me, this showed that kagi can save me time, I'm rarely scrolling to find good results where on DDG or Google I&#x
27.
▲
by
hackideiomat
3y ago
I do not think it is hard for any of them to get a new job and they would be flooooooded with offers if the opened their linkedin
28.
▲
by
hackideiomat
3y ago
DDoS is also a good distraction from actual attacks tho
29.
▲
by
hackideiomat
3y ago
But not my browser
30.
▲
by
hackideiomat
3y ago
Change your user agent so it looks like chrome, life is better then.
More ›