1. X
  2. koto
Log inSign up
koto
5,736 posts
user avatar

koto

@kkotowicz
security ninja wannabe Mastodon: @[email protected]
blog.kotowicz.net
Joined August 2007
388
Following
8,685
Followers
RepliesRepliesMediaMedia
  • user avatar
    koto
    @kkotowicz
    Sep 20, 2024
    Pretty cool exploit chain with the redirects. The writeup is also excellent, and the "screenshots" being actually interactive? 🤯 Thanks a lot for the research, @rebane2001!
    user avatar
    James Kettle
    @albinowax
    Sep 19, 2024
    Love a good client-side exploit chain! This crazy cross-product chain targeting Google by @rebane2001 is a great example of the type of exploit that gets easier the longer you spend targeting a single company lyra.horse/blog/2024/09/u…
  • user avatar
    koto
    @kkotowicz
    Jul 11, 2024
    XSS in Gmail is now $20k (or 50% more for exceptional quality report). Good thing we don't have XSSes anymore.... Or do we? :)
    user avatar
    Google VRP (Google Bug Hunters)
    Google
    @GoogleVRP
    Jul 11, 2024
    🚨💰 Google VRP Reward Update 💰🚨 Good news, we are significantly increasing the reward amounts offered by the Google VRP! Look out for up to 5x higher payouts and a maximum reward of $151,515! Details here: bughunters.google.com/blog/540051395…
  • user avatar
    koto
    @kkotowicz
    Jan 22, 2024
    See how Google's security engineering team handles rollouts at scale, so we can safely enforce Strict CSP, Trusted Types and other security features on 100s new services yearly.
    Image
    bughunters.google.com
    Blog: A Recipe for Scaling Security
    There are vastly more engineers at Google dedicated to creating and maintaining new products than there are security engineers working to secure products. For this reason, Google security has to...
  • user avatar
    koto
    @kkotowicz
    Jun 2, 2023
    One of the rougher edges of the platform that enables an xss vector is going away soon. This fixes xss many sites didnt ecen realize they had. Great body of work championed by @shhnjk!
    user avatar
    Lukas Weichselbaum
    @we1x
    Jun 2, 2023
    Replying to @we1x @garethheyes and @shhnjk
    developer.chrome.com/blog/migrate-w…
  • user avatar
    koto
    @kkotowicz
    Jan 28, 2023
    IRQ 5 though.
    user avatar
    Roy van Rijn
    @royvanrijn
    Jan 26, 2023
    If you know what this is: SET BLASTER=A220 I7 D1 H5 T6 ... it might be a good time to start taking daily supplements and consider a check-up at the doctor.

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
Advertisement
Advertisement