The real risk here isn't AI training - It's deanonymization. People posted in a "private" community under nicknames. However, the server administrator enables the "discoverability" feature for everyone. So the entire…
[flagged]
[dead]
What are you merging on - a shared PGP key or a crypto address or every hit it's own node? And what happens if different people happen to use the same nickname?
If Verisign frees up domain.name, the new owner could inherit email still directed to the old address, for example: password resets.
This is a creative hack, and here’s where it actually matters. Blocklist-based sanitizers and WAFs typically work by matching a string or a regex, so this type of hack usually slips past them. I found this class of XSS…
The real risk here isn't AI training - It's deanonymization. People posted in a "private" community under nicknames. However, the server administrator enables the "discoverability" feature for everyone. So the entire…
[flagged]
[dead]
[dead]
[dead]
[dead]
What are you merging on - a shared PGP key or a crypto address or every hit it's own node? And what happens if different people happen to use the same nickname?
If Verisign frees up domain.name, the new owner could inherit email still directed to the old address, for example: password resets.
This is a creative hack, and here’s where it actually matters. Blocklist-based sanitizers and WAFs typically work by matching a string or a regex, so this type of hack usually slips past them. I found this class of XSS…