0xcyborg

:)

[0xcyborg @user_cyborg]

The golden era of the Hacktivity page on HackerOne

[0xcyborg @user_cyborg]

ChatGPT is getting so good at creating YouTube thumbnails

[0xcyborg @user_cyborg]

@Tur24Tur @kalilinux @PlayStation 🔥🔥

[0xcyborg @user_cyborg]

@minfrin @IamAroke Thank you for the correction

[0xcyborg @user_cyborg]

Useful in restricted environments where only web traffic is allowed out

[0xcyborg @user_cyborg]

@xhacking_z @instagram No, they have their own platform even at the time when I reported this (2023). They used HackerOne/Bugcrowd to make paying bounties easier

[0xcyborg @user_cyborg]

A vulnerability I discovered in @instagram in 2023 allowed an attacker to determine whether private account A follows private account B (and vice versa) directly, without having access to the followers/following lists of either account.

[0xcyborg @user_cyborg]

@Cachorroexausto @instagram No, it took months

[0xcyborg @user_cyborg]

@skraft09 Thank you 👋

[0xcyborg @user_cyborg]

Another two 🏆

[0xcyborg @user_cyborg]

@tpiliposian 👏👏

[0xcyborg @user_cyborg]

By 'blocked by default' I mean explicit authorization would be required between two origins to allow framing, similar to how SOP works where a CORS header is needed for cross-origin requests

[0xcyborg @user_cyborg]

If browsers were designed today from scratch, cross-origin framing would very likely be blocked by default, greatly reducing clickjacking vulnerabilities, and the only reason I see that it is still allowed by default in today's browsers is backward compatibility

[0xcyborg @user_cyborg]

@ZohairAtique @javarevisited No, in https the entire http request is encrypted, including the path and query parameters

ISP know the website you are visiting through:
- DNS queries
- SNI during the TLS handshake
- Destination IP address

[0xcyborg @user_cyborg]

According to this BBP logic, it is okay for someone to add a reaction on your behalf since document admins -might- notice that in version history (which is private logs for the document) lol.

[0xcyborg @user_cyborg]

@khattab_2022 Thank you.

No, just a casual 'sorry for the delay in triaging this' message.

[0xcyborg @user_cyborg]

They finally woke up

[0xcyborg @user_cyborg]

@Blackstone0123 From November 🤣

[0xcyborg @user_cyborg]

@Math_files 1) 40 + 20 = 60
2) 7 + 8 = 15
3) 60 + 15 = 75

[Sometimes]