3 ms·

Marcus Greenwood (Founder of UB.IO) put out some good analysis of this at https://medium.com/the-automator/so-about-that-ba-hack-a82e5701f095 https://medium.com

by bradvl 8y ago

Marcus Greenwood (Founder of UB.IO) put out some good analysis of this at https://medium.com/the-automator/so-about-that-ba-hack-a82e5701f095 https://medium.com/the-automator/so-about-that-ba-hack-a82e5... And there's more analysis at http://huagati.blogspot.com/2018/05/things-you-probably-dont-want-to-do-on.html http://huagati.blogspot.com/2018/05/things-you-probably-dont... And the fake BAWAYs server is still up - https://twitter.com/inventur_es/status/1039519364733497344 https://twitter.com/inventur_es/status/1039519364733497344

strictnein 8y ago
Ehh, Marcus's analysis is off on some of the details and his prediction of a 3rd party JS (which he strangely originally kept referring to as XSS, which makes me question his thoughts even more) ended up being wrong.