Hacker Blog Posts

discrete blogarithm · personal blog

How to boost your popularity on OkCupid using CSRF and a JSON type confusion

blog.azuki.vip 6 min read

This is a quick blog post about a security vulnerability (now fixed) that allowed me to make anyone like or message a profile on okcupid.com simply by getting them to click a link on my website. In doing so, I used one of the most boring web application security issues (CSRF) combined with a somewhat interesting JSON…
Read on blog.azuki.vip → Discuss on HN (129) Archived copy
Points
295
HN comments
129
Submissions
1
Cited by
0 commenters

Security & PrivacyWeb & Frontend2021

On Hacker News

SubmittedTitle on HNPointsComments
Aug 2, 2021How to boost your popularity on OkCupid using CSRF and a JSON type confusion by flipnotic295129

Related posts from the same era