Yan Zhu

zyan.scripts.mit.edu

Popular posts: 3
Total points: 812
HN comments: 301
Rank: #2,831 personal

Visit zyan.scripts.mit.edu → On Hacker News Aug 2015 – May 2016

Web & Frontend 2 Security & Privacy 2 Society, Policy & Culture 1 Life, Learning & Writing 1

Most points Most discussed Most cited Newest

Timing attack against HSTS to sniff browser history in Chrome and Firefox

2015257 points94 commentscited by 3Security & Privacy details

Backdooring JavaScript using minifier bugs

2015211 points36 commentscited by 4Security & Privacy details

In addition to unforgettable life experiences and personal growth, one thing I got out of DEF CON 23 was a copy of POC||GTFO 0x08 from Travis Goodspeed. The coolest article I’ve read so far in it is “Deniable Backdoors Using Compiler Bugs,” in which the authors abused a pre-existing bug in CLANG to create a backdoored…