|
|
| | Stealing Your Private YouTube Videos, One Frame at a Time (xdavidhu.me) | |
3 points by wastedbrains on June 22, 2023 | past
|
|
| | Header spoofing via a hidden parameter in Facebook Batch GraphQL APIs (xdavidhu.me) | |
1 point by simonpure on Nov 22, 2022 | past
|
|
| | Accidental Google Pixel Lock Screen Bypass (xdavidhu.me) | |
1592 points by BXWPU on Nov 10, 2022 | past | 444 comments
|
|
| | Fixing the Unfixable: Story of a Google Cloud SSRF (xdavidhu.me) | |
137 points by mooreds on Jan 8, 2022 | past | 17 comments
|
|
| | Fixing the Unfixable: Story of a Google Cloud SSRF (xdavidhu.me) | |
1 point by mooreds on Jan 2, 2022 | past
|
|
| | Fixing the Unfixable: Story of a Google Cloud SSRF (xdavidhu.me) | |
11 points by xdavidhu on Jan 1, 2022 | past | 1 comment
|
|
| | I Built a TV That Plays All of Your Private YouTube Videos (xdavidhu.me) | |
4 points by arkadiyt on April 6, 2021 | past
|
|
| | I Built a TV That Plays All of Your Private YouTube Videos (xdavidhu.me) | |
2 points by g0xA52A2A on April 5, 2021 | past
|
|
| | The embedded YouTube player told me what you were watching (xdavidhu.me) | |
260 points by hackerpain on Jan 18, 2021 | past | 104 comments
|
|
| | The Embedded YouTube Player Told Me What You Were Watching (and More) (xdavidhu.me) | |
2 points by g0xA52A2A on Jan 18, 2021 | past
|
|
| | Stealing Your Private YouTube Videos, One Frame at a Time (xdavidhu.me) | |
1245 points by g0xA52A2A on Jan 11, 2021 | past | 194 comments
|
|
| | The unexpected Google wide domain check bypass (xdavidhu.me) | |
644 points by notRobot on March 9, 2020 | past | 114 comments
|
|
|
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact
|
