Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Some problems of URLs. Parent comment
https://www.youtube.com/watch?v=D1S-G8rJrEk
He also has a blog post about it:
http://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilitie...
The premise is that URL parsing is complex and libraries get it wrong. This problem is pervasive and leads to server side request forgery vulnerabilities, which Orange was able to escalate to remote code execution on Github.
There are no comments on this comment yet.
https://www.youtube.com/watch?v=D1S-G8rJrEk
He also has a blog post about it:
http://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilitie...
The premise is that URL parsing is complex and libraries get it wrong. This problem is pervasive and leads to server side request forgery vulnerabilities, which Orange was able to escalate to remote code execution on Github.