HNHacker News
TopNewBestAskShowJobs

galwm

4 karma · joined September 2, 2021

https://weizman.github.io/
submissionscomments
galwm··on With 1 Extension: $20K in Bounties from Anthropic, Perplexity, Google, Microsoft
More to come! Thanks!

BRowser AGent JACKing

galwm··on Is client side security dead – or a crucial part of the future?
Client side security is a niche tech field that seems to be unneeded for the most part. As someone who's very passionate about it, that's something that's hard for me to accept. After Shubham Shah addressed this topic in his tweet, I elaborate into the mixed feelings I have with this field, as well as present my take on the industry and most importantly, strongly argue why I think client side security isn't dying - but in fact is more crucial now than was ever before.
galwm··on Show HN: Generate regex patterns from examples
This is great! Shouldn't there be a link in the app to the Github source code repo? I wasn't able to find it
galwm··on Snow JavaScript: A new browser JavaScript security tool for iframes protection
Snow JS gets a callback and passes to it every new iframe/realm that is born in the web app, thus preventing attackers from maliciously abusing iframes to attack the app
galwm··on JavaScript Anti Debugging (Abusing Chromium Devtools Scope Pane)
Abusing the Chromium Devtools Scope Pane can allow execution of Javascript by the devtools while the main thread is paused by the debugger! I used this trick to create a very powerful anti debugging technique library that tracks the flow of debugging done by the user and changes the flow of execution accordingly