News for hackers. Stuff that matters.
Re:Blasting Past WebP - An analysis of the NSO BLASTPASS iMe... by genewitch on Friday March 28, 2025 @06:43AM (#43503753)
That avatar thing is exploitable on discord, at least. Don't recall the specifics, just keywords.
Re:Blasting Past WebP - An analysis of the NSO BLASTPASS iMe... by immibis on Saturday March 29, 2025 @05:40AM (#43514107)
You might be thinking of the minor Cloudflare exploit where the attacker can send you a message, then see on which Cloudflare PoP their profile image got cached.