News for hackers. Stuff that matters.

A comment on Harvesting credit card numbers and passwords from websites. Parent comment

Re:Harvesting credit card numbers and passwords from websites by brown9-2 on Saturday January 06, 2018 @02:15PM (#16086926)
How would you exfiltrate that data?
[ Parent | on HN ]
Re:Harvesting credit card numbers and passwords from websites by epmatsw on Saturday January 06, 2018 @02:22PM (#16086952)
Google Analytics has a query parameter that can be used to extract arbitrary data. So make a request to that with an ID that you control I guess? GitHub mentions it in their CSP post: https://githubengineering.com/githubs-post-csp-journey/
[ Parent | on HN ]
Re:Harvesting credit card numbers and passwords from websites by hrrsn on Saturday January 06, 2018 @05:58PM (#16087970)
Related: this Analytics attack has actually happened

https://www.reddit.com/r/btc/comments/7dsmvd/my_analysis_of_...

[ Parent | on HN ]