That must be the worst captcha I’ve ever seen.

Has there been some email leak from @Canva? Just got a spam message for an email used only for Canva.

Check out the video in which I’m talking with @kkotowicz about Google VRPs. Learn how you can start hacking Google! Let me know if there’s something you’d like us to cover in future videos 😀 youtu.be/R2qMd4PZbko?si=aMxH…

When MDN shows a feature that was available in a range of versions, does the release date mean the first or the last version?

I couldn’t watch the video yet and just decided to read the transcript. And since parts of it are super funny 😄

😅

Wow, I accidentally found a videocast (that I had no idea existed) of the first bug I've ever reported to Google bug bounty. It was not accepted because of the attack scenario, but still; nice journey into the past 😅

While I can imagine this behaviour leading to bugs, I'd say it seems intuitive for me. If you implemented it like in the image I'm attaching, you'd get the same result.

So I'm starting a Youtube Channel 😄 Join me today at 19:00 CEST (in other words: in three hours) when I'll talk about 10 highlights from my bug hunting career: youtube.com/watch?v=utz3SHit…

That’s how you chill

They also have other ridiculous articles. Like this about XSS: nordvpn.com/pl/blog/what-is-… (my favorite quote in the screenshot about how to protect from XSS)

Sigh... hopefully I'll be able to take it back online.

Very soon Chrome Canary will escape "<>" in attribute values. It should prevent some instances of mXSS ([1] for context). Currently under the flag: enable-experimental-web-platform-features. Let's hope it's web compatible :D [1] github.com/whatwg/html/issue… CC @zcorpan @freddyb

ICYMI if you have hearing loss (or just prefer to watch videos with subtitles), you can enable Live Caption in Chrome accessibility settings. Then even if a video doesn't provide CC, you'll still get them from Chrome! Works really cool but is only for English.