Comments on: benbit: Using XSS and live hacking tilllate.com

By: Blogwerk Blog

Blogwerk Blog — Sun, 01 Apr 2007 10:21:12 +0000

XSS-Sicherheitslücken bei Blogwerk: Kein Aprilscherz!…

Seit Wochen bestehen bei Blogwerk XSS-Sicherheitslücken. Wir haben deshalb nicht erwartet, dass sie heute behoben werden. Aber wir weisen jetzt deutlich darauf hin: Die gemeldeten XSS-Sicherheitslücken bei Blogwerk sind kein Aprilscherz!
……

By: Corsin

Corsin — Fri, 30 Mar 2007 15:52:46 +0000

@Dominik
No, I am sorry. The video file is over 500 MB big. YouTube only allows uploads with 100 MB and 10 minutes runetime. But if you know an other alternative, please let me know.

By: Dominik Tarolli

Dominik Tarolli — Fri, 30 Mar 2007 11:48:53 +0000

That was really interesting! I miss benbit @ blogcamp Switzerland but thanks to Corsin I got benbits key points now!

Could you post the video on youtube as well?

Thanks and Greetz

Dominik

By: Peter

Peter — Tue, 27 Mar 2007 20:05:42 +0000

And guess what, ZVV is not the only page doing “it”. You can disable the firefox prefetch function by setting “network.prefetch-next” to false in the about:config screen, to avoid this browser behaviour and to avoid that your browser accesses potentially unwanted content.

By: Mario Aeby

Mario Aeby — Tue, 27 Mar 2007 14:35:06 +0000

As far as I know he didn’t present any slides. He just surfed around on various sites, used some 1337 hacker tools like … Roboform and a Cookie Editor (both for firefox).

Nice though you preserved this awesome show on video