My first rickroll
Every time I find an XSS I always save it in Delicious. The other night I did the same but something was different. The “save bookmarks” dialogue looked a little…
Read moreDay 27: Cross-site scripting vulnerability at hulu.com
Like any good security vulnerability this one starts with a good friend suggesting a link, this time a tv-show on Hulu. Since it’s XSS awareness month my attention immediately went…
Read moreDay 24: Cross-site scripting vulnerability (XSS) at .apple.com
Powerful big companies or tiny small startups, we are all e potentially vulnerable to cross-site scripting attacks. I recently notified Bagcheck about an XSS. 7mins after the notification I received…
Read moreDay 19: Cross-site scripting vulnerability at netflix.com
Doing a little research before a movie night I was looking thru the Netflix movie database. I couldn’t really decide which movie to watch, so I looked for completely unrelated…
Read moreDay 7 and 8: Safer Internet Day
Earlier this week I was made aware that everybody in Denmark got a copy of the “Net Sikker Nu” magazine. It’s part of a yearly campaign to educate users how…
Read moreDay 6: Why can’t you fix an XSS in less than a week?
In Day 4 and the first success I wrote about how Yubico.com responded and fixed the vulnerability I found in their web site. I have had other site owners respond…
Read moreDay 5: The most popular vulnerabilities
Vulnerability statistics When I started this research I had no idea what I was looking for I just did it for the thrill of discovery or fun. After a while…
Read moreDay 4 and the first success
I had 211 XSS when I started writing this series of blog posts, the total as of writing this post is 237. These vulnerabilities are so ubiquitous that I will…
Read moreObligations
Due to a bad cold I was not able to post anything yesterday. Rest assured that you will not miss any of the daily letters nor any of the TLDs.…
Read moreCross-site scripting awareness month
I am going to declare February my personal Cross-site scripting (XSS) awareness month. It’s short enough that writing a post every day is manageable. Although I have no detailed plan…
Read more