
Episode 7: PortSwigger Top 10, TruffleSecurity Drama, and More!
Critical Thinking - Bug Bounty Podcast
00:00
The Risks of Same Site Strict Adoption
A hacker has created a tool that can steal money from your wallet using an arbitrary XSS vulnerability. This is going to be the new C surf, as more and more websites adopt same site strict rules. Same site strict means all requests are made by the same person at the same time. It's just such a little scrappy bug that you're like really, are you trying to make something out of a client side patch of Versel? But dude, it really has some crazy impact sometime.
Transcript
Play full episode