@tehjh @blubbfiction Also in Safari (since years) locally loaded HTML file can XHR any URL (web & file:///) and exfiltrate them. #WontFix :(
-
-
-
@cschneider4711@tehjh@blubbfiction only desktop Safari ofc? - 2 more replies
New conversation -
-
-
@tehjh Very cool PoC; it seems like this is primarily limited by the quality of your side channel. Could prob extend it to get dir listingsThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.