« first day (905 days earlier)      last day (52 days later) » 

8:30 AM
Firefox: No loading
 
WARNING: ROOM CONTAINS IMAGE USED TO TEST SECURITY BUG
room topic changed to ‮Shadow's Sandbox: WARNING: ROOM CONTAINS IMAGE USED TO TEST SECURITY BUG. Sandbox is dead, long live Shadow's sandbox! :D [box] [sand]
 
Failed to load resource: the server responded with a status of 401 ()
 
@HTTPS console or dialog?
 
Mine is simply blocked as an image
 
console
 
8:32 AM
so non issue :)
 
let me check in chrome
Chrome: 401
Firefox without PB: loads, no dialog
 
I think "Privacy Blocker" or something
 
Privacy Badger
 
 
4 hours later…
12:38 PM
since Shadow already made this into a test room... what happens with SWG?
 
@Derpy just broken image
@Derpy not accurate.... it was test room from its very beginning. :)
Sep 10 '16 at 7:38, by Shadow Wizard
Going to test "all time users" stat - looks like it's not accurate.
First message ^
 
ok, it not executes the javascript since it is included with an IMG tag.
 
@Derpy is that an actual image?
all I get is a server error
 
second one, forgot to make the plunker public
the first image is indeed broken, but you should see a second one with a black circle
 
both of them are broken
dead
 
12:51 PM
weird
 
let me check with chrome
 
try refreshing the page, the second url should work
 
Not necessarily, I got a bunch of security plugins enabled (Privacy Badger, DuckDuckGo Plus or whatever it's called) and using a generally high security level in Firefox
 
anyway, my point was that I could probably convince someone to click on the picture and thus execute the javascript embedded in the .svg.... but that is probably also not an issue.
 
Chrome, Edge and Firefox - internal server error on all
 
12:56 PM
@Derpy nope, onebox does not support svg
 
FF android, off and on my network, internal server error
 
@PrincessLuna yeah, same here.
 
I'm gonna try with Orfox if I can get past captcha that doesn't load...
 
 
2 hours later…
Anonymous
2:48 PM
I was hoping that I could upload SVGs too Channels to XSS the entire site but no.
 
2:59 PM
@Jeremy curious, did you try doing something about those things while you worked for SE?
(and were told "we don't have time/resources for this"?)
 
Anonymous
I don't think I ever looked back at this one.
 
Anonymous
The company was accommodating when I spent some time on related security things.
 
Anonymous
They are hiring a CISO or something now, that's pretty serious.
 
6:16 PM
//lick @Jer and @Sha
 
user359686
@PrincessLuna Licks @Jer and @Sha. shivers
 
9:42 PM
Is this SANDBOX??
 

« first day (905 days earlier)      last day (52 days later) »