Self-XSS to Site-Wide CSRF on Twitter (opens in new tab)

(speakerdeck.com)

2 pointskarma206y ago2 comments

2 comments

Cool, I liked it included blind alleys, too often people include just what worked to seem smarter.

For sure. It definitely echoes the thrill of bug-hunting when you know you’ve found something interesting but need to dig a bit deeper.

j / k navigate · click thread line to collapse

(speakerdeck.com)

2 pointskarma206y ago2 comments

Cool, I liked it included blind alleys, too often people include just what worked to seem smarter.

karma20OP6y ago

For sure. It definitely echoes the thrill of bug-hunting when you know you’ve found something interesting but need to dig a bit deeper.

j / k navigate · click thread line to collapse