1
Zoom Security Exploit: Cracking private meeting passwords
Short version: Zoom meetings were default protected by a 6 digit numeric password, meaning 1 million maximum passwords. I discovered a vulnerability in the Zoom web…
Tom Anthony
Tom has a PhD in AI, over 25 years experience in web dev. He is a security expert, and a search geek.
- Popular posts
- 7
- Total points
- 1,778
- HN comments
- 513
- Rank
- #983 personal
Visit tomanthony.co.uk → On Hacker News Mar 2014 – Jul 2020
2
Googlebot’s JavaScript random() function is deterministic
I was conducting some experiments on how Googlebot parses and renders Javascript, and I came across a couple of interesting things about the way it does so. The first…
3
Google bug bounty for security exploit that influences search results
Short version: For the $12 cost of a domain, I was able to rank in Google search results against Amazon, Walmart etc. for high value money terms in the US. The…
4
How to confirm a Google user’s specific email address
I reported an issue to Google, which allows an attacker to confirm whether someone is logged in to any one of a list of specific Google accounts.
5
XSS attacks on Googlebot allow search index manipulation
Googlebot is based on Google Chrome version 41 (2015), and therefore it has no XSS Auditor, which later versions of Chrome use to protect the user from XSS attacks…
6
Facebook exploit – Confirm website visitor identities
I discovered a Facebook bug which allows me to identify whether a visitor is logged in to a specific Facebook account. It can check hundreds of identities per second.
7
Google Exploit – Steal Account Login Email Addresses
I found a bug that allowed me to find anyone with a Google+ account's login email address. This could be used to target specific people for spear phishing.