Viewing profile — acorn221

First DEF CON, first conference talk and I loved it.

This is my extension, I made it because I hate the UX of PGP. It uses passkeys (or passwords) to encrypt all keys (public and private) at rest so your contacts can't get leaked eas…

This is a blog post I wrote comparing the scanning results with our own solution vs SpinAI. Multipassword going up in risk after they fixed a vulnerability was my favourite find.

ik lol, I was too lazy to change it

I thought I’d check to see whether or not they actually read what they were adding lol

If you want to go check for it, open linkedin on Chrome, open dev tools -> network tab -> magnifying glass at the top then search for "epstein" and you'll see it!

Yeah I mean it's not very commonly used by extensions. I quite like it as it's completely isolated and not detectable. I built my first extension which uses it as the primary inter…

Yeah I agree. All new extensions should have this for their web_accessible_resources. With that said, the chrome web store ecosystem has bigger problems infront of them. For exampl…

Yeah, this is the easiest way to get around it

So these extensions allow linkedin to do this though, it's literally them saying "yes, this site can ping this resource" - called "web_accessible_resources". This is fair from Link…

They have! It's these developers either not knowing or not caring about it which is the issue! I did a blog post about this a while back showing how they do it, and how you can get…

Yeah I agree

This gave someone the opportunity to add in "Jeffery_Epstein_did_not_kill_himself" to linkedin's client facing code base through this. If you open dev tools -> network tab -> netwo…