Tweets
-
You came to the wrong neighborhood... pic.twitter.com/dGf5NGalq2
Retweeted by batramView photo Hide photo -
@NealPoole unsandboxed flash inclusion? most players written in flash/actionscript seem to have problems, good that you're writing about it. -
@NealPoole jw6 or the stuff with 4 and 5? -
Did
@gmail spam filtering get way worse or is it just me? -
Reported
#XSS in Nightly Builds to@wordpress. Would have been bug bounty gold if it had found its way into a release version. -
Doing acknowledgement ABCs, got
#Apple,@BlackBerry,@ConstantContact. Time for@dropbox@facebook to get there ass in gear. -
@phr0nak response atleast for http://mircosoft.com reasonable fast, nsn just don't seem to care, adobe not talkative, Red-Hat just slow -
@google sec canned response: Nice catch! I’ve filed a bug and will update you once we’ve got more information. so nice, i got it twice today -
Had to explain to
@CloudFlare why "XSS on subdomain + .cloudflare.com cookies - httpOnly = Uh-oh" ^^ -
Just got listed by etsy http://www.etsy.com/help/article/2463 … (thanks http://wordpress.com and as of yet unnamed vendor)
-
@yappare no, i was looking for something to do with my ability to set cookies(overwriting csrf-token ) and realized there was no protection -
@homakov not simpler than one google-search in this case, but thats besides the point, by the way another great Write-Up, keep them coming -
:D for the record, report http://wordpress.com vulnerabilities to http://automattic.com/security/ => WordPress shirt and some swag for me
-
@homakov there seem to be a few http://heroku.com -subdomains that are vulnerable to#XSS -
@techcrunch@gigaom@cbs@cnn@flickr ... you have a security problem courtesy of@wordpressdotcom, going to shut up about this now#XSS -
@wordpressdotcom don't pay any attantion to me looking at this http://vip.wordpress.com/clients . Anyone else with a bounty running wordpresscom?#XSS -
@rinakikun yeah, really brought a smile to my face, when I found the problem. One Bug to rule them all, One Search-engine to find them ...
@_batram hasn't tweeted yet.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
Flag this media
This has already been marked as containing sensitive content.


Simon Taddiken
batram