111–112 of 112 posts
That’s why I don’t browse the web while logged in google/fb/twitter. As I keep them in separated firefox containers
It's not about you, it's about your parents and grandparents.
doesn't google employ the elite of world programming? how can such stuff even happen? honest question.
This seems something trivial to miss. The developer is asked to put the player into a page that has basically just the player and exposes and API. The API should allow playing videos and playlists. They do the obvious thing and it all works. The fact is that the security here wasn't the default. They need to explicitly realize that this allows the website to list playlists and consider that this should not allow list…
Was that a typo? Seems to me it should be an incredibly UNlikely vulnerability for "elite" programmers to miss it. If you meant that as written I don't understand it; please explain.