News for hackers. Stuff that matters.

A comment on Abusing JSONP with Rosetta Flash.

Re:Abusing JSONP with Rosetta Flash by amenghra on Tuesday July 08, 2014 @08:05PM (#8007424)
Nice to see the exploit finally out.

I gave a talk about the potential for this to happen about a year ago: http://quaxio.com/jsonp_handcrafted_flash_files/

[ Parent | on HN ]
Re:Abusing JSONP with Rosetta Flash by Eridrus on Tuesday July 08, 2014 @09:17PM (#8007632)
People have known about the potential for much longer than a year:

http://www.slideshare.net/guest2821a2/web-browsers-and-other...

http://www.slideshare.net/guest2821a2/web-browsers-and-other...

Actually going out and doing it is something else.

[ Parent | on HN ]