<?xml version="1.0"
@spaced
58
http://.li\"alert(a.source)</SCRIPTCRIPT>a=/XSS/ alert(a.source)</SCRIPT>>alert(a.source)</SCRIPT>
Followers
243
Following
1
Resource Credits
Available
Used
Location
<?xml version="1.0" ?>
Website
http://.li\"alert(a.source)</SCRIPTCRIPT>a=/XSS/ alert(a.source)</SCRIPT>>alert(a.source)</SCRIPT>
Created
2016-07-11 17:40
RSS Feed
Subscribe
Posts
spaced
steem
8y
[AMA I hunt BUGS, and collect BUG BOUNTYs] Hello Everyone, please read this, it took two years to find two of these, and I'm back and finding the SECOND CRITICAL XSS bug in steemit.com. Please READ & afterwards vote up for attention
[AMA I hunt BUGS, and collect BUG BOUNTYs] Hello Everyone, please read this, it took two years to find two of these, and I'm back and finding the SECOND CRITICAL XSS bug in steemit.com. Please READ & afterwards vote up for attention
SECURE DISCLOSURE With issues like these, it can be hard to get the attention of those who need to know, I have sent emails to Ned, but I'm not in the inner circle. I mostly just hang out on Steemit and
1
2
spaced
test
9y
utf8 is hard :)
utf8 is hard :)
test
0
1
spaced
security
9y
I have one working XSS, admins please contact me, it may not be safe to use this site atm
I have one working XSS, admins please contact me, it may not be safe to use this site atm
You remember what happened last time an XSS was found right? Admins lost their accounts and were posting fake messages and stealing money and spamming? I think this could happen again.
spaced
test
9y
test
test
lol dont think you should be able to do that dont click on anything, probably should avoid this page, unless i deleted it
spaced
test
9y
test
test
sdfsdf sdf dsf sd f sdf sdf s f ds
spaced
steemit
9y
[Bug Report] I found an XSS attack in the new profile settings but because Steemit community is so awesome and a self healing organism I'm going to report it privately because the community rewards white hats
[Bug Report] I found an XSS attack in the new profile settings but because Steemit community is so awesome and a self healing organism I'm going to report it privately because the community rewards white hats
I have reported several bugs, most don't receive much but when an article telling hackers to report bugs instead of using the hacks got 3,000 USD in rewards while my reporting of dangerous bugs was getting
spaced
test
9y
[Bug Report] I found an XSS attack in the new profile settings but because Steemit community is so awesome and a self healing organism I'm going to report it privately because the community rewards white hats
[Bug Report] I found an XSS attack in the new profile settings but because Steemit community is so awesome and a self healing organism I'm going to report it privately because the community rewards white hats
I have reported several bugs, most don't receive much but when an article telling hackers to report bugs instead of using the hacks got 3,000 USD in rewards while my reporting of dangerous bugs was getting
spaced
test
10y
\\\\\\\\\art\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\art\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\art\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
spaced
steemit
10y
[Bug Report] I found a JS DOS
[Bug Report] I found a JS DOS
\t<!---<div style=" "
spaced
steem
10y
Why did a post telling people to report bugs make 3,000 USD in upvotes and my actual post about a legitimate security issue that the developers directly thanked me get less than 100 USD?
Why did a post telling people to report bugs make 3,000 USD in upvotes and my actual post about a legitimate security issue that the developers directly thanked me get less than 100 USD?
I wrote these two posts before the hack: [Security/Bug Report] Steemit.com is vulnerable to "Slow Post" and "Slowloris" DOS attacks Steemit.com Administrators: You should not allow
spaced
test
10y
testing testing testing
testing testing testing
testing
spaced
spam
10y
spam
spam
test test test
spaced
steemit
10y
[Security/Bug Report] Steemit.com is vulnerable to "Slow Post" and "Slowloris" DOS attacks
[Security/Bug Report] Steemit.com is vulnerable to "Slow Post" and "Slowloris" DOS attacks
Introduction As some may have seen, the site has been going off line when the WebSocket server throws an internal service error 500. This is due to a slowloris type attack against the WebSocket connection.
spaced
security
10y
1
1
1
spaced
security
10y
[Security/Bug Report] Steemit.com is vulnerable to "Slow Post" and "Slowloris" DOS attacks
[Security/Bug Report] Steemit.com is vulnerable to "Slow Post" and "Slowloris" DOS attacks
Introduction As some may have seen, the site has been going off line when the WebSocket server throws an internal service error 500. This is due to a slowloris type attack against the WebSocket connection.
spaced
steemit
10y
New users will rightfully view this community as sexist, we are creating economic incentives for woman to present themselves solely as sexual objects. Instead we should reward woman who post intellectual content.
New users will rightfully view this community as sexist, we are creating economic incentives for woman to present themselves solely as sexual objects. Instead we should reward woman who post intellectual content.
We can fix this as a community and porn is already free on the Internet. That is all.
spaced
steem
10y
Can we please stop being sexist as a community, we are creating economic incentives for woman to present themselves solely as sexual objects. Instead we should reward woman who post intellectual content.
Can we please stop being sexist as a community, we are creating economic incentives for woman to present themselves solely as sexual objects. Instead we should reward woman who post intellectual content.
We can fix this as a community and porn is already free on the internet. That is all.
spaced
steem
10y
Know Go Lang? Help out with the new Go RPC client go-steem/rpc
Know Go Lang? Help out with the new Go RPC client go-steem/rpc
It is function but it needs a lot of love. It would be nice to get this to be on par with piston. Things that need to be done: Write tests for existing code Add the capability to build transactions Add
spaced
test
10y
Test
Test
Test post
spaced
steem
10y
Why are steem and steem dollars separate tokens?
Why are steem and steem dollars separate tokens?
Can anyone direct to me to the documentation that explains why steem and steem dollars are separate tokens. I have a hard time understanding why its not just Steem and Steem Power wtihout Steem dollars.