pull down to refresh

Improving Browser Security with CSP (2011)blog.twitter.com/engineering/en_us/a/2011/improving-browser-security-with-csp
767 sats \ 3 comments \ @220522c2c4 9 Feb 2024 security
related
🚩 First Stacker News CTF - NWC Debug Edition 🪲
8810 sats \ 50 comments \ @220522c2c4 17 Feb 2024 meta
WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Riskthehackernews.com/2024/02/wordpress-litespeed-plugin.html
386 sats \ 2 comments \ @doofus 28 Feb 2024 security
Stacker News Terms of Service
965 sats \ 17 comments \ @sn 4 Dec 2023 meta freebie
0 sat zap XSS attack
255 sats \ 0 comments \ @SHA256man 13 Aug nostr
Stacker News Privacy Policy
622 sats \ 5 comments \ @sn 4 Dec 2023 meta
Critical Next.js Vulnerability Allows Attackers Bypass Middleware Authorizationthehackernews.com/2025/03/critical-nextjs-vulnerability-allows.html
304 sats \ 2 comments \ @ch0k1 25 Mar 2025 security
TryHackMe's HackerHolidays 2026 Event - Day 07 - Do Not Disturb [Writeup]
241 sats \ 0 comments \ @nichrome 28 Aug security tech Education
Mobile Browsers Comparison Tabledivestos.org/pages/browsers
230 sats \ 0 comments \ @hueso 3 Feb 2024 privacy
Can you spot the XSS vulnerability?
746 sats \ 29 comments \ @220522c2c4 15 Mar 2025 security
CISA: Roundcube email server bug now exploited in attackswww.bleepingcomputer.com/news/security/cisa-roundcube-email-server-bug-now-exploited-in-attacks/
306 sats \ 0 comments \ @ch0k1 14 Feb 2024 security
TryHackMe's HH 2026 Event - Day 09 - Cryptocabana [Writeup]
502 sats \ 0 comments \ @nichrome 4 Oct security tech Education
Critical Next.js ImageResponse Flaw Lead to Code Execution via Crafted SVG Inputthehackernews.com/2026/09/critical-nextjs-imageresponse-flaw-can.html
479 sats \ 1 comment \ @ch0k1 23 Sep security
Chrome's hidden X-Browser-Validation header reverse engineeredgithub.com/dsekz/chrome-x-browser-validation-header
326 sats \ 1 comment \ @carter 13 Jul 2025 security
CCs need to be removed from the site
687 sats \ 45 comments \ @b11ae762a0 13 Jul meta
Element.setHTML() method - New api xss safe api just droppeddeveloper.mozilla.org/en-US/docs/Web/API/Element/setHTML
210 sats \ 0 comments \ @carter 23 Oct 2025 devs
Not like this: researchers pen open letter on the dangers of age verificationwww.pcgamer.com/hardware/scientists-warn-against-crappy-age-verification-if-implemented-without-careful-consideration-the-new-regulation-might-cause-more-harm-than-good/
404 sats \ 1 comment \ @Scoresby 4 Mar tech Politics_And_Law
Unseeable prompt injections in screenshots: vuln in Comet and other AI browsersbrave.com/blog/unseeable-prompt-injections/
250 sats \ 9 comments \ @0xbitcoiner 23 Oct 2025 AI
Block all AI browsers for the foreseeable futurewww.theregister.com/2025/12/08/gartner_recommends_ai_browser_ban/
233 sats \ 0 comments \ @0xbitcoiner 8 Dec 2025 AI
Just the Browser - Just the Browserjustthebrowser.com/
316 sats \ 0 comments \ @Scoresby 23 Jan hyperlinks
"Web Environment Integrity" is an all-out attack on the free Internetwww.fsf.org/blogs/community/web-environment-integrity-is-an-all-out-attack-on-the-free-internet
1717 sats \ 8 comments \ @beorange 28 Jul 2023 tech
How to defend your website with ZIP bombsblog.haschek.at/2017/how-to-defend-your-website-with-zip-bombs.html
1412 sats \ 4 comments \ @hn 10 Jan 2024 tech