News for hackers. Stuff that matters.

A comment on Atlassian Rovo Exfiltrates Data, Bypassing Controls. Parent comment

Re:Atlassian Rovo Exfiltrates Data, Bypassing Controls by simonw on Thursday August 06, 2026 @08:39AM (#49195845)
Right, I should have been more clear. It's not about the ?, it's about not being able to dynamically construct a URL at all.

Otherwise you could set up wildcard DNS and extract data to base64encodedstolendata.evil.com

[ Parent | on HN ]
Re:Atlassian Rovo Exfiltrates Data, Bypassing Controls by antonvs on Thursday August 06, 2026 @09:01AM (#49196087)
Joke’s on you, I’ve blocked evil.com
[ Parent | on HN ]