Postmortem: Co-founding a Web3 startup as a crypto skeptic young dev(anicetnougaret.fr)

56 points by AnicetN 3 years ago | 41 comments

1 bug, $50k in bounties, a Zendesk backdoor(gist.github.com)

1542 points by mmsc 2 years ago | 400 comments

A GitHub Gist write-up by a 15-year-old bug hunter describing a Zendesk bug affecting many Fortune 500 companies that earned over $50,000 in bounties.

We pwned X, Vercel, Cursor, and Discord through a supply-chain attack(gist.github.com)

1080 points by hackermondev 10 months ago | 397 comments

A GitHub Gist writeup by a 16-year-old researcher describing a critical XSS vulnerability in Mintlify docs that affected X, Vercel, Cursor, Discord and others.

My .config Ship of Theseus(shift1w.com)

28 points by jacobwiseberg 6 months ago | 12 comments

Why do people seem to prefer Chrome's devtools over Firefox's?(old.reddit.com)

23 points by thunderbong 3 years ago | 30 comments

0-click deanonymization attack targeting Signal, Discord, other platforms(gist.github.com)

1370 points by hackermondev 1 year ago | 417 comments

A GitHub Gist writeup by a 15-year-old researcher describing a 0-click deanonymization attack that locates users of Signal, Discord and other apps within about 250 miles.