Submissions from nealpoole.com

		Setting up PHP-FastCGI and nginx? Don’t trust the tutorials. (nealpoole.com)
		1 point by WhiteDawn on Jan 28, 2014 \| past
		XSS Filter Bypass in validator Node.js Module (nealpoole.com)
		2 points by _vvdf on July 5, 2013 \| past
		CSRF Token Disclosure in Coinbase (nealpoole.com)
		2 points by wglb on June 4, 2013 \| past
		(Unpatched) Reflected XSS in JW Player 5 (nealpoole.com)
		1 point by wglb on April 16, 2013 \| past
		Bad Changes to eBay’s Responsible Disclosure Policy (nealpoole.com)
		1 point by tshtf on March 18, 2013 \| past
		How Hard Is It To Blacklist A Java Applet? (nealpoole.com)
		2 points by wglb on Jan 24, 2013 \| past
		Preventing CSRF Attacks with AJAX and HTTP Headers (nealpoole.com)
		39 points by swah on Aug 25, 2012 \| past \| 4 comments
		CSRF, Clickjacking, and the Role of X-Frame-Options (nealpoole.com)
		1 point by tshtf on July 25, 2012 \| past
		Security Vulnerabilities in Popular Flash Applets (SWFUpload, Plupload) (nealpoole.com)
		2 points by nbpoole on May 17, 2012 \| past
		Twitter White Hat Vulnerabilities (nealpoole.com)
		1 point by wglb on April 14, 2012 \| past
		CSRF, Clickjacking, and the Role of X-Frame-Options (nealpoole.com)
		1 point by wglb on March 31, 2012 \| past
		Directory Traversal via PHP Multi-File Uploads (nealpoole.com)
		1 point by dominis on March 9, 2012 \| past
		Java Deployment Toolkit Plugin Does Not Validate Installer Executable (nealpoole.com)
		1 point by wglb on Oct 27, 2011 \| past
		Java Deployment Toolkit Plugin Does Not Validate Installer Executable (nealpoole.com)
		2 points by wglb on Oct 18, 2011 \| past \| 1 comment
		Java Applet Same-Origin Policy Bypass via HTTP Redirect (nealpoole.com)
		1 point by wglb on Oct 18, 2011 \| past
		Directory Traversal via PHP Multi-File Uploads (nealpoole.com)
		8 points by wglb on Oct 3, 2011 \| past \| 1 comment
		XSS Filters can be used to bypass clickjacking (scroll down to point 3) (nealpoole.com)
		8 points by simonw on Aug 26, 2011 \| past \| 2 comments
		Lessons from Facebook's Security Bug Bounty Program (nealpoole.com)
		3 points by nbpoole on Aug 25, 2011 \| past
		Arbitrary Code Execution with Null Bytes, PHP, and Old Versions of nginx (nealpoole.com)
		5 points by nbpoole on Aug 24, 2011 \| past
		Safari for Windows handles text/plain content improperly (CVE-2010-1420) (nealpoole.com)
		2 points by wglb on Aug 22, 2011 \| past
		Cross-Site Scripting? In PHP Notices? It's more likely than you think (nealpoole.com)
		43 points by nbpoole on Aug 18, 2011 \| past \| 14 comments
		File uploads allow for cross-site scripting in Wordpress (nealpoole.com)
		1 point by nbpoole on April 27, 2011 \| past \| 1 comment
		Avoiding Arbitrary Code Execution with nginx and php-fastcgi (nealpoole.com)
		61 points by nbpoole on April 8, 2011 \| past \| 15 comments
		Directory Traversal / Local File Inclusion on addons.mozilla.org (nealpoole.com)
		2 points by nbpoole on Feb 10, 2011 \| past \| 1 comment
		How Does Cross-Site Scripting Become Arbitrary Code Execution? (nealpoole.com)
		3 points by nbpoole on Jan 31, 2011 \| past
		Preventing CSRF Attacks with AJAX and HTTP Headers (nealpoole.com)
		6 points by wglb on Jan 22, 2011 \| past \| 2 comments
		HTTP Response Splitting Vulnerability on reddit.com (nealpoole.com)
		80 points by there on Jan 15, 2011 \| past \| 26 comments
		Reports from Google’s Vulnerability Reward Program (nealpoole.com)
		10 points by nbpoole on Dec 18, 2010 \| past
		Hacking Google Calendar (nealpoole.com)
		25 points by dfield on Dec 1, 2010 \| past \| 5 comments

HN For You