4 ms·
tl;dw Transcript?
by Kilimanjaro 16y ago
tl;dw
Transcript?
- IgorPartola 16y agoJavaScript often runs in a trusted environment, same origin policy does not save you from accessing certain kinds of information so you can cause mayhem even on private networks, you can overwrite built-in functions to sniff things out, there are CSS exploits (the history exploit for example) which allow you to de-anonymize a user, obfuscating code is easy. Also, don't implement public key cryptography in JS, because that's stupid.
- tptacek 16y agoDon't implement any cryptography in JS, because that's stupid.