franjkovic

Karma: 1,114
Created: 12 years ago

About

[ my public key: https://keybase.io/josipfranjkovic; my proof: https://keybase.io/josipfranjkovic/sigs/4EYnl7a6Vko4DGKQFypdzXwAxT-YnFN8DEc5X34RttQ ]

My security blog: https://www.josipfranjkovic.com

Recent Submissions

1. ▲ Getting any Facebook user's friend list and partial payment card details (josipfranjkovic.com) 416 points · 7 years ago · 91 comments
2. ▲ Taking over Facebook accounts using Free Basics partner portal (josipfranjkovic.com) 1 point · 7 years ago · 0 comments
3. ▲ Hacking Facebook accounts using CSRF in Oculus-Facebook integration (josipfranjkovic.com) 5 points · 7 years ago · 0 comments
4. ▲ Stealing Facebook access_tokens using CSRF in device login flow (josipfranjkovic.com) 127 points · 9 years ago · 82 comments
5. ▲ The easiest bug bounties I have won (josipfranjkovic.blogspot.com) 145 points · 10 years ago · 27 comments
6. ▲ Race conditions on Facebook, DigitalOcean and others (fixed) (josipfranjkovic.blogspot.com) 294 points · 10 years ago · 88 comments
7. ▲ Reading local files from Facebook's server (fixed) (josipfranjkovic.blogspot.com) 44 points · 11 years ago · 19 comments

All submissions on HN · View profile on HN