Brilliantly written and chillingly convincing. A pretty persuasive argument for site owners to sort out their CSPs (Content Security Policies). I can almost see @Scott_Helme and @troyhunt nodding along.https://medium.com/@david.gilbertson/im-harvesting-credit-card-numbers-and-passwords-from-your-site-here-s-how-9a8cb347c5b5 …
-
-
Apologies Alex, but I had a greater duty to the wider world (wide web). Hoping your webmaster job is not now in jeopardy.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
& Web Standards TL; Blink API OWNER
Named PWAs w/
DMs open. Tweets my own; press@google.com for official comms.