blog.arusekk.pl on Hacker News

2 stories on the front page, newest first. Scroll down to watch the site change over time.

Screenshot of blog.arusekk.pl: Sourcehut account takeover via build logs (XSS in ansi2html)

Sourcehut account takeover via build logs (XSS in ansi2html)(blog.arusekk.pl)

136 points by arusekk 1 month ago | 27 comments

A vulnerability writeup describing a wormable XSS in SourceHut's ansi2html.py that let attackers take over accounts of users viewing injected build logs.

sourcehut xss cve account-takeover

Screenshot of blog.arusekk.pl: Lossless GIF recompression via exhaustive search

Lossless GIF recompression via exhaustive search (blog.arusekk.pl)

48 points by ZacnyLos 4 months ago | 12 comments

blog.arusekk.pl on Hacker News

Sourcehut account takeover via build logs (XSS in ansi2html)(blog.arusekk.pl)

Lossless GIF recompression via exhaustive search(blog.arusekk.pl)

Lossless GIF recompression via exhaustive search (blog.arusekk.pl)