News for hackers. Stuff that matters.

A comment on Google's login page accepts a vulnerable GET parameter. Parent comment

Re:Google's login page accepts a vulnerable GET parameter by peteretep on Wednesday August 31, 2016 @06:32AM (#12397278)
The only bit you're missing here is redirecting the user back to a Google page you do need to be logged in for, so they think everything is ok and don't think twice about what just happened
[ Parent | on HN ]
Re:Google's login page accepts a vulnerable GET parameter by kuschku on Wednesday August 31, 2016 @07:37AM (#12397504)
I was hoping I could avoid getting flagged as phishing site if I'd make the form ignore all content and redirect back here.

Turns out I was wrong.

[ Parent | on HN ]