News for hackers. Stuff that matters.

A comment on Adult sites are stashing exploit code inside racy .svg files.

Re:Adult sites are stashing exploit code inside racy .svg files by QAkICoU7IDNkpFu on Sunday August 10, 2025 @09:02AM (#44854907)
“The user will have to be logged in on Facebook for this to work, but we know many people keep Facebook open for easy access.”

Well there's your problem right there.

[ Parent | on HN ]
Re:Adult sites are stashing exploit code inside racy .svg files by mananaysiempre on Sunday August 10, 2025 @11:07AM (#44855694)
Bog-standard CSRF is what that is. It’s essentially the second thing you guard against, right after sanitizing inputs to prevent XSS and SQL injection.
[ Parent | on HN ]