technical.cx Sources

Lobsters

Rebane (@[email protected])

Attached: 1 video back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even...

Lobsters

ACM

Comments

Lobsters

Why does the arrow (->) operator in C exist?

The dot (.) operator is used to access a member of a struct, while the arrow operator (->) in C is used to access a member of a struct which is referenced by the pointer in question. The pointer

Lobsters

XSS Is Deadly for Passkeys: The Hidden Risk of Attestation None

A single XSS vulnerability can turn passkeys from a phishing-resistant login mechanism into a persistent account takeover backdoor. If malicious JavaScript can run on your page, it may be able to register an attacker-controlled passkey against the victim’s...

Topics: Security

Lobsters

Emaan Rana

I rewrote this like 3 times over the course of 7 days and spent way too long on these diagrams so hopefully this is up to snuff.

Lobsters

C++26: More function wrappers

C++26 continues to fill the gaps in our type-erased callable wrapper story. We already had std::function since C++11 and std::move_only_function since C++23, but there were still missing pieces. Now we’re getting two new additions: std::copyable_function...