HNHacker News
TopNewBestAskShowJobs

homakov

4,700 karma · joined September 29, 2011

https://x.com/homakov https://instagram.com/homakov
submissionscomments

RECONNECT – critical bug in websites with Facebook Login

sakurity.com·11 pts·homakov·
0

Critical vulnerability in Spree Commerce, explained

sakurity.com·1 pts·homakov·
0

Your API Authentication is insecure, and we'll tell you why

sakurity.com·11 pts·homakov·
3

Ruby's open-uri library is an example of the Ruby-Insecure-Way

sakurity.com·5 pts·homakov·
0

Format Injection in Duo Web SDK

sakurity.com·3 pts·homakov·
0

Ruby's open-uri is one step away from RCE

sakurity.com·5 pts·homakov·
0

Using open-uri? Check your code – you're playing with fire

sakurity.com·5 pts·homakov·
0

Hire me for on-site security consulting in San Francisco Bay Area

sakurity.com·3 pts·homakov·
0

Public Security Report for Peatio Exchange

sakurity.com·1 pts·homakov·
0

Can we hack a device that only reads QR codes?

sakurity.com·2 pts·homakov·
0

The most paranoid way to transfer data – QR Channel

sakurity.com·4 pts·homakov·
0

How a crypto exchange can be hacked in 3 steps

sakurity.com·4 pts·homakov·
0

Hacking an exchange with OAuth and bypassing 2FA

sakurity.com·6 pts·homakov·
0

Hacking a Bitcoin exchange powered by Rails

sakurity.com·8 pts·homakov·
0

Hacking a Bitcoin exchange – the hard way

sakurity.com·14 pts·homakov·
3

Bitstamp problem and warm wallets

homakov.blogspot.com·42 pts·homakov·
20

A technology to make websites absolutely secure

securecanvas.com·1 pts·homakov·
0

SecureCanvas – interface-based protection

securecanvas.com·15 pts·homakov·
4

CSRF in Doorkeeper OAuth2 gem

homakov.blogspot.com·249 pts·homakov·
79

New Paypal gateway UI is a disaster

homakov.blogspot.com·4 pts·homakov·
0

The No CAPTCHA problem

homakov.blogspot.com·215 pts·homakov·
96

Hacking file uploaders with race condition

homakov.blogspot.com·5 pts·homakov·
0

OAuth Security Cheatsheet

oauthsecurity.com·6 pts·homakov·
0

Bypassing ClearClick and X-Frame-Options:Visible

homakov.blogspot.com·1 pts·homakov·
0

Facebook profile detector

sakurity.com·2 pts·homakov·
0

"Trackify" security puzzle

sakurity.com·2 pts·homakov·
0

OAuth Security Cheatsheet

oauthsecurity.com·125 pts·homakov·
15

Covert Redirect FAQ

homakov.blogspot.com·12 pts·homakov·
0

Telegram API was revealing private conversations' titles

translate.google.com·1 pts·homakov·
0

Paperclip vulnerability leading to XSS or RCE

homakov.blogspot.com·2 pts·homakov·
0
← PreviousPage 2 of 5Next →