Flash-based XSS in Nokia's MediaElements component

June 29, 2013

Here I present a (reported) Flash-based XSS vulnerability I discovered in r.nokia.com, requiring no user interaction. …

Flash-based XSS in Yandex's AmCharts component

June 29, 2013

Here I present a (reported) Flash-based XSS vulnerability I discovered in wordstat.yandex.com, requiring no user interaction. …

Get the perfect Google Voice number, Grep-style!

March 17, 2013

Google Voice is an incredibly useful service, offering numbers from nearly every area code in the US. It is possible to search for a Google Voice number in their database by area or zip code. You can also enter a word or phrase you’d like to include in the number (exploiting the mnemonic format) from within the Google interface, and a convenient dialog box will show you available numbers that match your criteria. …