homakov

86 ms·

901.
by homakov 13y ago
it can be a solution, not ideal: proper non-xhr insertions on site.com will stop working. but for first step it's good enough.
902.
by homakov 13y ago
>Is this RoR specific because RoR will always allow JSON responses to be turned into JSONP, or is there something else at work? you can't turn any JSON into JSONP. No, JSONP here is result of using RJS templates . It has nothing to
903.
by homakov 13y ago
proved above, can be bypassed
904.
by homakov 13y ago
He dismisses removal of it. He just wants to find a painless way to fix security concern. I don't know such way
905.
by homakov 13y ago
+1 https://twitter.com/homakov/status/406466616897986560
906.
by homakov 13y ago
second part of your post looks vague. I'd say any GET-accessible .js template is leaking all data it has inside. It's not precisely JSONP. It turns out to be JSONP, unintendedly. This is where it becomes vulnerable
907.
by homakov 13y ago
location.__defineGetter__('host',function(){return 'google.com'}) undefined location.host "google.com"
908.
by homakov 13y ago
It's not an option. Attacker can set getter on location.domain to bypass thath "JS protection".
909.
RJS leaking vulnerability in multiple Rails applications(homakov.blogspot.com)
145 points by homakov 13y ago|67 comments
910.
by homakov 13y ago
Right. In my opinion some of drugs can be called evil but prostitution is something natural and not evil at all
911.
by homakov 13y ago
> The drug wars already tell us you can't get rid of some perceived evil define "evil"
912.
by homakov 13y ago
One giant brothel. Isn't it awesome? What's wrong with you guys!
913.
by homakov 13y ago
how many cards we have? I have 3 and see no use in coin
914.
Sakurity Hustlers - top of Bug Bounty Hunters(sakurity.com)
3 points by homakov 13y ago|0 comments
915.
Stealing user session with open-redirect bug in Rails(homakov.blogspot.com)
2 points by homakov 13y ago|0 comments
916.
Stealing user session with open-redirect bug in Rails(homakov.blogspot.com)
3 points by homakov 13y ago|0 comments
917.
by homakov 13y ago
Providers should create anti-spam system, so when Clients get hacked they don't receive tons of spam on users' walls
918.
by homakov 13y ago
Living in bangkok
919.
by homakov 13y ago
Amount and stupidness of bugs in fb says otherwise
920.
by homakov 13y ago
you are right, facebook had lots of CSRF previously, it is obvious they don't take basic security seriously
921.
by homakov 13y ago
Why live in amerika when we have asia?
922.
by homakov 13y ago
Oh so you imply they all was forced? Hell no. It is just better than clerq in 7 11 for 5 times less salary
923.
by homakov 13y ago
Disgusting reaction is a result of biased childhood. It asdociates w gang and guns. Herr it is safe
924.
by homakov 13y ago
That. Do you honestly enjoy writing PHP? Likely no. Nobody cares
925.
by homakov 13y ago
Besides investors and startups SF is terrible for living. Why? Go to thai.
926.
by homakov 13y ago
Living means living and enjoying. You clearly cant enjoy life for grand in europez.
927.
by homakov 13y ago
Only in thai u can hang out only with expats and not care about locals. Ukraine is much less fan in this sense
928.
by homakov 13y ago
Also get driver license
929.
by homakov 13y ago
I spend about 10 usd for every meal bcause chicken with rice is so terrible and im tired of eating these rice with something every day. Prices in shopping malls are as high as everywhere in the world
930.
by homakov 13y ago
Ps. Traveled around the world now living in pattaya. Asq questions.

More ›