http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2012-10-10 03:57:16 - bdpuk : EG: javascript:for var j = 0; j getHttplength; j++ {ifgetHttpheaderj == Content-Type documentwritelngetHttpdataj;}http://www.secuobs.com/twitter/news/349426.shtmlhttp://www.secuobs.com/twitter/news/349426.shtml 2012-10-07 03:28:34 - gcouprie : RT @JBay1337: Nyan Cat video in pure CSS : http://tco/bvyUZW3ANo javascript, usless, but funhttp://www.secuobs.com/twitter/news/348842.shtmlhttp://www.secuobs.com/twitter/news/348842.shtml 2012-10-03 18:43:28 - _olivier_ : Book Nerd / Code Nerd: If Hemingway wrote javascript - http://tco/9pjLxgGBhttp://www.secuobs.com/twitter/news/347928.shtmlhttp://www.secuobs.com/twitter/news/347928.shtml 2012-10-02 01:32:26 - xntrik : RT @rioter: So if you love nodejs and you love javascript we have something for you at http://tco/WutV0swN in the speaker sectionhttp://www.secuobs.com/twitter/news/347443.shtmlhttp://www.secuobs.com/twitter/news/347443.shtml 2012-10-02 01:30:39 - ChrisJohnRiley : RT @XSSVector: meta http-equiv=refresh content=0 javascript:alert1 #opera http://tco/baK326zKhttp://www.secuobs.com/twitter/news/347439.shtmlhttp://www.secuobs.com/twitter/news/347439.shtml 2012-10-01 23:42:28 - theharmonyguy : @insertScript If a filter blacklists javascript:, data: URIs, perhaps blob: could still workhttp://www.secuobs.com/twitter/news/347417.shtmlhttp://www.secuobs.com/twitter/news/347417.shtml 2012-09-28 20:48:53 - miscsecurity : Suposedly javascript renders faster on the iPhone than any other phone http://tco/fSbVN72dhttp://www.secuobs.com/twitter/news/346825.shtmlhttp://www.secuobs.com/twitter/news/346825.shtml 2012-09-18 02:23:02 - revskills : RT @trufae: Inside JavascriptCore's LowLevel interpreter: http://tco/zvzq3Qga #javascript #webkit #js #asmhttp://www.secuobs.com/twitter/news/344672.shtmlhttp://www.secuobs.com/twitter/news/344672.shtml 2012-09-17 20:03:00 - ioerror : @quinnnorton The notion that Chrome plugins can't run binaries/machine code or that they are only javascript is wrong: http://tco/ehkBN5Oghttp://www.secuobs.com/twitter/news/344547.shtmlhttp://www.secuobs.com/twitter/news/344547.shtml 2012-09-14 18:20:04 - revskills : Write bug-free javascript with Pebbles by Joseph Perla http://tco/y4BNQVTShttp://www.secuobs.com/twitter/news/343954.shtmlhttp://www.secuobs.com/twitter/news/343954.shtml 2012-09-13 20:34:35 - bortzmeyer : RT @brabram: @bortzmeyer c'est du javascript avec une syntaxe moins à chier + quelques bonus, c'est pas révolutionnaire mais très agréab http://www.secuobs.com/twitter/news/343599.shtmlhttp://www.secuobs.com/twitter/news/343599.shtml 2012-09-09 02:54:27 - TimelessP : Remember simply create a password page http://tco/cbcUnnyr You might enjoy simply hook the keyboard in javascript http://tco/kPa6CdEIhttp://www.secuobs.com/twitter/news/342346.shtmlhttp://www.secuobs.com/twitter/news/342346.shtml 2012-09-07 13:10:29 - Motoma : By injecting javascript into a page from a man-in-the-middle position they were able to retrieve cookies Sounds underwhelming to mehttp://www.secuobs.com/twitter/news/341934.shtmlhttp://www.secuobs.com/twitter/news/341934.shtml 2012-09-07 01:14:34 - _sinn3r : RT @corelanc0d3r: mona rop now produces ruby, python javascript chains also in -rva mode, run mona up to get the latest #immuni http://www.secuobs.com/twitter/news/341779.shtmlhttp://www.secuobs.com/twitter/news/341779.shtml 2012-09-06 22:35:11 - sussurro : RT @corelanc0d3r: mona rop now produces ruby, python javascript chains also in -rva mode, run mona up to get the latest #immuni http://www.secuobs.com/twitter/news/341638.shtmlhttp://www.secuobs.com/twitter/news/341638.shtml 2012-09-06 21:32:23 - WTFuzz : Updated an IE8 exploit and removed all javascript Think this is my first browser exploit without javascripthttp://www.secuobs.com/twitter/news/341576.shtmlhttp://www.secuobs.com/twitter/news/341576.shtml 2012-09-06 19:07:22 - EdiStrosar : RT @corelanc0d3r: mona rop now produces ruby, python javascript chains also in -rva mode, run mona up to get the latest #immuni http://www.secuobs.com/twitter/news/341393.shtmlhttp://www.secuobs.com/twitter/news/341393.shtml 2012-09-06 19:07:07 - corelanc0d3r : @kingasmk you mean convert shellcode into javascript format you can do that with msfpayload/msfvenomhttp://www.secuobs.com/twitter/news/341390.shtmlhttp://www.secuobs.com/twitter/news/341390.shtml 2012-09-06 19:07:07 - corelanc0d3r : @kingasmk that's more of a javascript issue - just undo the hex to unescape format - in each dword, simply swap byte 34 with byte 12http://www.secuobs.com/twitter/news/341389.shtmlhttp://www.secuobs.com/twitter/news/341389.shtml 2012-09-06 12:44:30 - antic0de : RT @corelanc0d3r: mona rop now produces ruby, python javascript chains also in -rva mode, run mona up to get the latest #immuni http://www.secuobs.com/twitter/news/341030.shtmlhttp://www.secuobs.com/twitter/news/341030.shtml 2012-09-06 09:39:47 - tnicholson : RT @corelanc0d3r: mona rop now produces ruby, python javascript chains also in -rva mode, run mona up to get the latest #immuni http://www.secuobs.com/twitter/news/340873.shtmlhttp://www.secuobs.com/twitter/news/340873.shtml 2012-08-15 02:33:57 - julianor : RT @ekoparty PIN para todos y todas by Pablo Solé #ekoparty2012 - javascript, the hackers language bye bye python ;http://www.secuobs.com/twitter/news/340155.shtmlhttp://www.secuobs.com/twitter/news/340155.shtml 2012-08-14 13:17:25 - xanda : RT @hdmoore: fun with non-alphanumeric javascript: http://tco/xrynZruV // really similar to JSF*ck by @hasegawayosukehttp://www.secuobs.com/twitter/news/339995.shtmlhttp://www.secuobs.com/twitter/news/339995.shtml 2012-08-13 14:38:45 - makash : RT @hdmoore: fun with non-alphanumeric javascript: http://tco/t35FeNxAhttp://www.secuobs.com/twitter/news/339836.shtmlhttp://www.secuobs.com/twitter/news/339836.shtml 2012-08-12 23:37:31 - jeremiahg : To achieve Anonymity while in a browser, using @torproject is good, but no where near enough What you can do w/ javascript is plain scaryhttp://www.secuobs.com/twitter/news/339763.shtmlhttp://www.secuobs.com/twitter/news/339763.shtml 2012-08-12 23:37:31 - jeremiahg : @wgragido Im saying traffic analysis is only 1 way to deanonymize a user javascript provides other ways that have nothing to do w/ packetshttp://www.secuobs.com/twitter/news/339762.shtmlhttp://www.secuobs.com/twitter/news/339762.shtml 2012-08-12 22:49:03 - Gillis57 : currently @crashsystems is schooling me on some javascript knowledge Over starbucks/JambaJuicehttp://www.secuobs.com/twitter/news/339760.shtmlhttp://www.secuobs.com/twitter/news/339760.shtml 2012-08-12 11:38:21 - brennantom : RT @r_netsec: Bypassing XSS protection: Transform any javascript code into an equivalent sequence of {}+ characters - http://tco/4 http://www.secuobs.com/twitter/news/339735.shtmlhttp://www.secuobs.com/twitter/news/339735.shtml 2012-08-12 09:39:50 - dloss : RT @justinvincent: Write any javascript code with just these characters: {}+ http://tco/RI68cvVzhttp://www.secuobs.com/twitter/news/339718.shtmlhttp://www.secuobs.com/twitter/news/339718.shtml 2012-08-12 09:20:21 - emgent : RT @r_netsec: Bypassing XSS protection: Transform any javascript code into an equivalent sequence of {}+ characters - http://tco/4 http://www.secuobs.com/twitter/news/339709.shtmlhttp://www.secuobs.com/twitter/news/339709.shtml 2012-08-12 07:15:23 - bojanz : RT @r_netsec: Bypassing XSS protection: Transform any javascript code into an equivalent sequence of {}+ characters - http://tco/4 http://www.secuobs.com/twitter/news/339695.shtmlhttp://www.secuobs.com/twitter/news/339695.shtml 2012-08-12 01:33:16 - s7ephen : RT @r_netsec: Bypassing XSS protection: Transform any javascript code into an equivalent sequence of {}+ characters - http://tco/4 http://www.secuobs.com/twitter/news/339657.shtmlhttp://www.secuobs.com/twitter/news/339657.shtml 2012-08-11 21:25:22 - hdmoore : fun with non-alphanumeric javascript: http://tco/t35FeNxAhttp://www.secuobs.com/twitter/news/339642.shtmlhttp://www.secuobs.com/twitter/news/339642.shtml 2012-08-11 15:40:21 - johl : Write any javascript code with just these characters: {}+ http://tco/FEhcwsWihttp://www.secuobs.com/twitter/news/339619.shtmlhttp://www.secuobs.com/twitter/news/339619.shtml 2012-08-11 13:52:06 - fede_k : RT @r_netsec: Bypassing XSS protection: Transform any javascript code into an equivalent sequence of {}+ characters - http://tco/4 http://www.secuobs.com/twitter/news/339607.shtmlhttp://www.secuobs.com/twitter/news/339607.shtml 2012-08-11 13:52:06 - fede_k : RT @mattaereal: Bypassing XSS protection: Transform any javascript code into an equivalent sequence of {}+ characters - http://tco http://www.secuobs.com/twitter/news/339606.shtmlhttp://www.secuobs.com/twitter/news/339606.shtml 2012-08-08 00:10:17 - jeremiahg : @Beaker just wait till people really figure out the flawed trust models that are third-party javascript includeshttp://www.secuobs.com/twitter/news/338781.shtmlhttp://www.secuobs.com/twitter/news/338781.shtml 2012-08-07 00:09:15 - hypatiadotca : RT @strcpy: some hipster should write a javascript version of microsoft comic chathttp://www.secuobs.com/twitter/news/338530.shtmlhttp://www.secuobs.com/twitter/news/338530.shtml 2012-08-04 23:17:43 - jeremiahg : @rogue_analyst In our day all we had was a text editor and javascript alerts Real web hacking was in netscape IE6 w/o dev environment ;http://www.secuobs.com/twitter/news/338240.shtmlhttp://www.secuobs.com/twitter/news/338240.shtml 2012-08-03 11:25:37 - Mephux : @dkubb I personally love javascript syntax also not a fan of abstraction without benefithttp://www.secuobs.com/twitter/news/337908.shtmlhttp://www.secuobs.com/twitter/news/337908.shtml 2012-08-02 17:52:42 - selenakyle : @ktneely agreed, can't think of one But also can't remember if javascript can be embedded or nothttp://www.secuobs.com/twitter/news/337685.shtmlhttp://www.secuobs.com/twitter/news/337685.shtml 2012-08-02 13:42:17 - mwtracker : #CCITTFaxDecode javascript a/v fail 5/42 https://tco/GcbYb5NThttp://www.secuobs.com/twitter/news/337645.shtmlhttp://www.secuobs.com/twitter/news/337645.shtml 2012-07-28 10:25:29 - hrbrmstr : @itsecurity @jadedsecurity i wanted a sample of the javascript/HTML #toomanyhobbieshttp://www.secuobs.com/twitter/news/336570.shtmlhttp://www.secuobs.com/twitter/news/336570.shtml 2012-07-26 22:58:59 - xanda : RT @paviles: JavaScript awesomeness: Set, Map, Default arguments,… // by Paul Rouget http://tco/PgOSWVqd #javascript #ECMAScript #firefoxhttp://www.secuobs.com/twitter/news/336104.shtmlhttp://www.secuobs.com/twitter/news/336104.shtml 2012-07-20 23:17:23 - JoelEsler : I don't care that you can deobfuscate javascript Can you stop it from occurring the first placehttp://www.secuobs.com/twitter/news/335048.shtmlhttp://www.secuobs.com/twitter/news/335048.shtml 2012-07-20 23:17:23 - JoelEsler : @Golmer every blogger wants to prove they can deobfuscate some javascript it seems likehttp://www.secuobs.com/twitter/news/335047.shtmlhttp://www.secuobs.com/twitter/news/335047.shtml 2012-07-19 08:05:10 - 2gg : RT @ryanaraine: firefox 14 killed a lot of nasty security bugs https://tco/i6ebySQe Example: Code execution through javascript: URLshttp://www.secuobs.com/twitter/news/334548.shtmlhttp://www.secuobs.com/twitter/news/334548.shtml 2012-07-18 19:11:57 - ryanaraine : firefox 14 killed a lot of nasty security bugs https://tco/i6ebySQe Example: Code execution through javascript: URLshttp://www.secuobs.com/twitter/news/334411.shtmlhttp://www.secuobs.com/twitter/news/334411.shtml 2012-06-30 20:08:01 - pusscat : @googlechrome @0xabad1dea does it allow jit'd javascripthttp://www.secuobs.com/twitter/news/331233.shtmlhttp://www.secuobs.com/twitter/news/331233.shtml 2012-06-25 07:27:27 - nicolasbrulez : @kahusecurity Using javascript keywords plain text attack / xray you can recover 'key' automaticallyhttp://www.secuobs.com/twitter/news/330013.shtmlhttp://www.secuobs.com/twitter/news/330013.shtml 2012-06-23 22:53:09 - Marsmensch : RT @eliot: FuckItJS uses state-of-the-art technology to make sure your javascript code runs whether your compiler likes it or not http: http://www.secuobs.com/twitter/news/329771.shtmlhttp://www.secuobs.com/twitter/news/329771.shtml 2012-06-23 18:13:09 - dakami : RT @eliot: FuckItJS uses state-of-the-art technology to make sure your javascript code runs whether your compiler likes it or not http: http://www.secuobs.com/twitter/news/329744.shtmlhttp://www.secuobs.com/twitter/news/329744.shtml 2012-06-23 15:43:38 - eliot : FuckItJS uses state-of-the-art technology to make sure your javascript code runs whether your compiler likes it or not http://tco/F0NJm0uIhttp://www.secuobs.com/twitter/news/329732.shtmlhttp://www.secuobs.com/twitter/news/329732.shtml 2012-06-23 15:24:51 - r00tbsd : RT @homakov: Popular PHP site is 'secure' this way: turns into sc ript and javascript into jav*script all tags http://www.secuobs.com/twitter/news/329728.shtmlhttp://www.secuobs.com/twitter/news/329728.shtml 2012-06-22 18:02:40 - y0ug : RT @homakov: Popular PHP site is 'secure' this way: turns into sc ript and javascript into jav*script all tags http://www.secuobs.com/twitter/news/329438.shtmlhttp://www.secuobs.com/twitter/news/329438.shtml 2012-06-22 12:20:47 - hrbrmstr : #spiffy small-footprint sparkline-y javascript library Peity : http://tco/f5yq8AqL : by @benpickles @ismasanhttp://www.secuobs.com/twitter/news/329344.shtmlhttp://www.secuobs.com/twitter/news/329344.shtml 2012-06-21 21:41:10 - johullrich : More AV fail Take old javascript/pdf exploit, encode as XDP, and AV is blind http://tco/BoJpekTU #AVfailhttp://www.secuobs.com/twitter/news/329092.shtmlhttp://www.secuobs.com/twitter/news/329092.shtml 2012-06-17 21:14:48 - opexxx : ghostpy headless webkit client for python: http://tco/EYJmxlA2 neat Looks interesting expecially for javascript http://tco/iE25AZP5http://www.secuobs.com/twitter/news/328315.shtmlhttp://www.secuobs.com/twitter/news/328315.shtml 2012-06-14 17:04:24 - bluetouff : Combien de fois faudra t-il expliquer qu'on ne gere pas de logique avec du javascript bordel :http://www.secuobs.com/twitter/news/327488.shtmlhttp://www.secuobs.com/twitter/news/327488.shtml 2012-06-08 13:53:34 - Viss : Heeee apparently two lines of javascript alerts constitute a virus :bhttp://www.secuobs.com/twitter/news/326076.shtmlhttp://www.secuobs.com/twitter/news/326076.shtml 2012-06-08 01:21:35 - cudeso : 35 hours to get a freaking javascript escape problem solved I need a breakhttp://www.secuobs.com/twitter/news/325965.shtmlhttp://www.secuobs.com/twitter/news/325965.shtml 2012-06-07 06:21:58 - ax0n : http://tco/TqnJVnOe Hashes a password in javascript so the plaintext doesn't get sent and checks it against the LinkedIn hash dumphttp://www.secuobs.com/twitter/news/325800.shtmlhttp://www.secuobs.com/twitter/news/325800.shtml 2012-06-04 01:22:52 - EdiStrosar : RT @egyp7: The web is fucking *annoying* with javascript turned onhttp://www.secuobs.com/twitter/news/325244.shtmlhttp://www.secuobs.com/twitter/news/325244.shtml 2012-06-01 15:42:47 - egyp7 : The web is fucking *annoying* with javascript turned onhttp://www.secuobs.com/twitter/news/324782.shtmlhttp://www.secuobs.com/twitter/news/324782.shtml 2012-05-30 07:51:43 - theharmonyguy : RT @blowdart: If you can write #metro apps in html5 and javascript and now there's clippy for #jquery METRO APPS WITH CLIPPY http: http://www.secuobs.com/twitter/news/324233.shtmlhttp://www.secuobs.com/twitter/news/324233.shtml 2012-05-30 01:02:59 - getwired : RT @blowdart: If you can write #metro apps in html5 and javascript and now there's clippy for #jquery METRO APPS WITH CLIPPY http: http://www.secuobs.com/twitter/news/324157.shtmlhttp://www.secuobs.com/twitter/news/324157.shtml 2012-05-29 23:16:24 - hypatiadotca : RT @blowdart: If you can write #metro apps in html5 and javascript and now there's clippy for #jquery METRO APPS WITH CLIPPY http: http://www.secuobs.com/twitter/news/324143.shtmlhttp://www.secuobs.com/twitter/news/324143.shtml 2012-05-29 21:12:24 - xntrik : RT @ryanfaceryan: OH the thing about javascript testing is that all roads lead to selenium which is an absolute dick buckethttp://www.secuobs.com/twitter/news/324125.shtmlhttp://www.secuobs.com/twitter/news/324125.shtml 2012-05-27 23:21:35 - travisgoodspeed : I'm happy to know the ASCII Ribbon Campaign is still around, but sad to see its homepage is HTML including foreign javascripthttp://www.secuobs.com/twitter/news/323765.shtmlhttp://www.secuobs.com/twitter/news/323765.shtml 2012-05-19 04:24:15 - JoelEsler : Maybe, just maybe #gawker, if you subtracted some of the 10 *10* tracking javascript APIs on the pages, you could get it load faster #nopehttp://www.secuobs.com/twitter/news/321628.shtmlhttp://www.secuobs.com/twitter/news/321628.shtml 2012-05-16 18:46:22 - innismir : RT @wimremes: hotel networks inside the US are equally vulnerable and at least Marriott has been found to inject javascript natively …http://www.secuobs.com/twitter/news/320954.shtmlhttp://www.secuobs.com/twitter/news/320954.shtml 2012-05-15 02:04:07 - Jhaddix : @midisFI when the domain is trusted, and they click on the seemingly safe link, now the attacker can run javascript on their machinehttp://www.secuobs.com/twitter/news/320433.shtmlhttp://www.secuobs.com/twitter/news/320433.shtml 2012-05-11 09:17:44 - TimelessP : I'm sorry, if your article is hosted on a web site that downloads many Web 20 javascripts then I won't be reading your articlehttp://www.secuobs.com/twitter/news/319723.shtmlhttp://www.secuobs.com/twitter/news/319723.shtml 2012-05-10 21:59:54 - xanda : RT @jedisct1: Another javascript image loader, with interesting features: https://tco/4jSVeE6Yhttp://www.secuobs.com/twitter/news/319578.shtmlhttp://www.secuobs.com/twitter/news/319578.shtml 2012-05-07 01:55:41 - Roni_Bachar : RT @BenHayak: In the next few days I will post about the layer 3 javascript DOM XSS I've foundhttp://www.secuobs.com/twitter/news/318523.shtmlhttp://www.secuobs.com/twitter/news/318523.shtml 2012-05-03 06:28:33 - mubix : This is probably a stupid question, but since Nodejs is javascript, does XSS get more powerful because the server is the same languagehttp://www.secuobs.com/twitter/news/317552.shtmlhttp://www.secuobs.com/twitter/news/317552.shtml 2012-05-03 06:28:33 - mubix : @Mephux Agreed and understood Just curious if there are any extended javascript based functions that are provided by Nodejs that http://www.secuobs.com/twitter/news/317551.shtmlhttp://www.secuobs.com/twitter/news/317551.shtml 2012-04-28 06:57:28 - w3af : @beefproject are you guys exploring the possibility of porting nmap -sV to javascript using web workers and web sockets Sounds possiblehttp://www.secuobs.com/twitter/news/316285.shtmlhttp://www.secuobs.com/twitter/news/316285.shtml 2012-04-28 06:57:28 - w3af : @sandrogauci Loved the concept behind those web application payloads in javascripthttp://www.secuobs.com/twitter/news/316284.shtmlhttp://www.secuobs.com/twitter/news/316284.shtml 2012-04-27 07:17:02 - Xyborg : Hammerjs: A javascript library for multi touch gestures http://tco/5gLulHDMhttp://www.secuobs.com/twitter/news/315978.shtmlhttp://www.secuobs.com/twitter/news/315978.shtml 2012-04-23 10:01:14 - carne : RT @javascriptalert: Prevent cross-site scripting when using JSON objects using ESAPI and Jackson framework 17x « Stefan Hendriks' Blo http://www.secuobs.com/twitter/news/314739.shtmlhttp://www.secuobs.com/twitter/news/314739.shtml 2012-04-18 08:42:37 - mckt_ : @alexlevinson I have a java book how do I javascript in MSOFFICE I tryed to a macro but it won'thttp://www.secuobs.com/twitter/news/313410.shtmlhttp://www.secuobs.com/twitter/news/313410.shtml 2012-04-15 23:50:58 - ioerror : @lsanoj It's an experiment - @moxie didn't comment on the phoneGap version - is that also totally broken because it is javascripthttp://www.secuobs.com/twitter/news/312737.shtmlhttp://www.secuobs.com/twitter/news/312737.shtml 2012-04-15 13:14:30 - ioerror : @infil00p @rysiekpl @kaepora Heh @hellais is currently working on mpOTR in javascript for this thing :http://www.secuobs.com/twitter/news/312683.shtmlhttp://www.secuobs.com/twitter/news/312683.shtml 2012-04-14 18:19:23 - ioerror : @moxie @kaepora I am talking about the addon though - it's implemented in javascript, etchttp://www.secuobs.com/twitter/news/312521.shtmlhttp://www.secuobs.com/twitter/news/312521.shtml 2012-04-14 02:05:58 - gianlucaSB : don’t tell me how to enable javascript, tell me why I should enable it http://tco/DRMpumx0 iva @mikkohttp://www.secuobs.com/twitter/news/312401.shtmlhttp://www.secuobs.com/twitter/news/312401.shtml 2012-04-07 02:37:16 - dildog : pastehtml supports javascript http://tco/TM1wMmqVhttp://www.secuobs.com/twitter/news/310177.shtmlhttp://www.secuobs.com/twitter/news/310177.shtml 2012-04-06 13:38:08 - gianlucaSB : Hotel Wifi injects javascript for profit http://tco/hER9kuFV via @waxpancakehttp://www.secuobs.com/twitter/news/309947.shtmlhttp://www.secuobs.com/twitter/news/309947.shtml 2012-04-04 15:39:29 - Mephux : @georg_cantor backbonejs is just javascript more design and data manipulation ie server binary proto backend or client frontend devhttp://www.secuobs.com/twitter/news/309290.shtmlhttp://www.secuobs.com/twitter/news/309290.shtml 2012-04-04 07:59:04 - egyp7 : Another argument for disabling javascript: http://tco/yrNdYuIU says i'm 1 among 28,657 with it off *Unique* out of 2 million with it onhttp://www.secuobs.com/twitter/news/309166.shtmlhttp://www.secuobs.com/twitter/news/309166.shtml 2012-04-03 21:35:38 - matalaz : javascript - Is it possible to calculate hashes in the browser using the user's video card, by using WebGL or Flash http://tco/W9Ahm9ayhttp://www.secuobs.com/twitter/news/309053.shtmlhttp://www.secuobs.com/twitter/news/309053.shtml 2012-04-02 01:53:00 - ebordac : RT @javascriptalert: About this guide - JavaScript Reference - BlackBerry Browser - 70: http://tco/HSpXfvWUhttp://www.secuobs.com/twitter/news/308586.shtmlhttp://www.secuobs.com/twitter/news/308586.shtml 2012-04-01 00:29:30 - vrsj : @JedidiahJSmith Yes, but it's complicated It's got to be set as a javascript bookmark It's a lot easier on Android @bufferapphttp://www.secuobs.com/twitter/news/308399.shtmlhttp://www.secuobs.com/twitter/news/308399.shtml 2012-03-28 02:28:14 - quine : RT @benjaminws: lets talk about javascript http://tco/cUCm03Hvhttp://www.secuobs.com/twitter/news/307113.shtmlhttp://www.secuobs.com/twitter/news/307113.shtml 2012-03-23 09:26:16 - DinisCruz : RT @jeremiahg: “@krvw: Stop developing new code w/ inline javascript TODAY #RuggedSoftware” Good luck with that Cc: @chrisenghttp://www.secuobs.com/twitter/news/305996.shtmlhttp://www.secuobs.com/twitter/news/305996.shtml 2012-03-23 09:26:16 - DinisCruz : RT @pdp: @jeremiahg if you stop using inline javascript then you will start using dynamically generated external js which I think might http://www.secuobs.com/twitter/news/305994.shtmlhttp://www.secuobs.com/twitter/news/305994.shtml 2012-03-23 01:50:48 - jeremiahg : “@krvw: Stop developing new code w/ inline javascript TODAY #RuggedSoftware” Good luck with that Cc: @chrisenghttp://www.secuobs.com/twitter/news/305859.shtmlhttp://www.secuobs.com/twitter/news/305859.shtml 2012-03-23 00:17:22 - chriseng : RT @krvw: Stop developing new code with inline javascript TODAY #RuggedSoftwarehttp://www.secuobs.com/twitter/news/305841.shtmlhttp://www.secuobs.com/twitter/news/305841.shtml 2012-03-22 21:24:52 - pdp : @jeremiahg if you stop using inline javascript then you will start using dynamically generated external js which I think might be worse :http://www.secuobs.com/twitter/news/305796.shtmlhttp://www.secuobs.com/twitter/news/305796.shtml 2012-03-20 11:25:54 - ToolsWatch : @twitter Here is another guy to delete from twitter @captaindavearms He keeps posting harmful links with malware shitty javascripthttp://www.secuobs.com/twitter/news/305013.shtmlhttp://www.secuobs.com/twitter/news/305013.shtml 2012-03-19 04:07:20 - Mephux : #protip minify your javascript from time to time Prevent odd errors after compilation fighting a nasty one right nowhttp://www.secuobs.com/twitter/news/304646.shtmlhttp://www.secuobs.com/twitter/news/304646.shtml 2012-03-10 00:22:22 - briankrebs : @d0tslash hahaha thanks man I forgot nothing shows up in the bugmenot boxes if you have javascript disabledhttp://www.secuobs.com/twitter/news/301863.shtmlhttp://www.secuobs.com/twitter/news/301863.shtml 2012-03-09 05:08:48 - Viss : @MrB0t javascript in a pdf that fetches and runs vbs ;bhttp://www.secuobs.com/twitter/news/301562.shtmlhttp://www.secuobs.com/twitter/news/301562.shtml 2012-03-08 14:59:08 - cudeso : the javascript-commonconf in #ubuntu is getting dirty on mehttp://www.secuobs.com/twitter/news/301270.shtmlhttp://www.secuobs.com/twitter/news/301270.shtml 2012-03-06 08:08:56 - mattjay : @theKos @superevr just got around to reading this javascript It looks wayyy too simple It just straight up accesses file://http://www.secuobs.com/twitter/news/300374.shtmlhttp://www.secuobs.com/twitter/news/300374.shtml 2012-03-05 18:18:10 - mbenlakhoua : RT @securityshell: Phishing with obfuscated javascript, shellcode and malware http://tco/5F86iufbhttp://www.secuobs.com/twitter/news/300139.shtmlhttp://www.secuobs.com/twitter/news/300139.shtml 2012-03-05 16:09:21 - securityshell : Phishing with obfuscated javascript, shellcode and malware http://tco/5F86iufbhttp://www.secuobs.com/twitter/news/300096.shtmlhttp://www.secuobs.com/twitter/news/300096.shtml 2012-03-03 23:21:45 - opexxx : RT @sans_isc: Diary Phishing with obfuscated javascript, shellcode and malware, Fri, Mar 2nd: Be careful with the http://tco/YTh http://www.secuobs.com/twitter/news/299799.shtmlhttp://www.secuobs.com/twitter/news/299799.shtml 2012-03-03 23:10:57 - grecs : RT @sans_isc: Phishing with obfuscated javascript, shellcode malware http://tco/T7xkcxIp //Been getting few of thesehttp://www.secuobs.com/twitter/news/299797.shtmlhttp://www.secuobs.com/twitter/news/299797.shtml 2012-03-03 16:50:46 - sans_isc : Diary Phishing with obfuscated javascript, shellcode and malware, Fri, Mar 2nd: Be careful with the http://tco/YThcNToY #sansischttp://www.secuobs.com/twitter/news/299726.shtmlhttp://www.secuobs.com/twitter/news/299726.shtml 2012-03-03 11:41:53 - mbenlakhoua : RT @manuelsantander: Phishing with obfuscated javascript, shellcode and malware http://tco/g4TEn8P3http://www.secuobs.com/twitter/news/299700.shtmlhttp://www.secuobs.com/twitter/news/299700.shtml 2012-03-03 10:43:12 - xanda : RT @manuelsantander: Phishing with obfuscated javascript, shellcode and malware http://tco/g4TEn8P3http://www.secuobs.com/twitter/news/299694.shtmlhttp://www.secuobs.com/twitter/news/299694.shtml 2012-03-02 22:58:19 - DarkOperator : Owning bad guys {and mafia} with javascript botnets http://tco/rEOQlVE1http://www.secuobs.com/twitter/news/299579.shtmlhttp://www.secuobs.com/twitter/news/299579.shtml 2012-02-27 23:18:40 - craignewell : Anyone good with javascript I need two chunks of code merged to integrate functionalityhttp://www.secuobs.com/twitter/news/297980.shtmlhttp://www.secuobs.com/twitter/news/297980.shtml 2012-02-27 01:14:07 - GNUCITIZEN : RT @pdp: the tokenizer/highlighter can now successfully parse http which embeds html which embed javascript whichhttp://www.secuobs.com/twitter/news/297710.shtmlhttp://www.secuobs.com/twitter/news/297710.shtml 2012-02-27 01:08:04 - pdp : the tokenizer/highlighter can now successfully parse http which embeds html which embed javascript which embeds html :http://www.secuobs.com/twitter/news/297709.shtmlhttp://www.secuobs.com/twitter/news/297709.shtml 2012-02-25 12:49:35 - eliot : I only know three friends participating in #codeyear's javascript lessons; they're all women http://tco/aElqY8ZRhttp://www.secuobs.com/twitter/news/297451.shtmlhttp://www.secuobs.com/twitter/news/297451.shtml 2012-02-23 23:46:57 - dragosr : Nasty new drive-by spam infector, no attachment click, just open mail and javascript runs in the HTML preview http://tco/fCoO9aLkhttp://www.secuobs.com/twitter/news/297012.shtmlhttp://www.secuobs.com/twitter/news/297012.shtml 2012-02-23 21:57:26 - grantstavely : If the lack of a good javascript whitelist extension is your last reason for not using Safari: http://tco/KCwlueaihttp://www.secuobs.com/twitter/news/296976.shtmlhttp://www.secuobs.com/twitter/news/296976.shtml 2012-02-23 00:40:43 - funkatron : RT @robey: breaking news: ruby fanboys who think they invented coding are irritated by new wave of javascript fanboys who think they inv http://www.secuobs.com/twitter/news/296511.shtmlhttp://www.secuobs.com/twitter/news/296511.shtml 2012-02-22 23:50:59 - briankrebs : @whereits yeah lots of unescaped javascript crap at the bottom of bio page, stuff like loadphpspl=rhinohttp://www.secuobs.com/twitter/news/296468.shtmlhttp://www.secuobs.com/twitter/news/296468.shtml 2012-02-22 11:09:16 - lostinsecurity : RT @NunoTreez: The art of keylogging with msf and javascript: http://tco/8thvPGEShttp://www.secuobs.com/twitter/news/296289.shtmlhttp://www.secuobs.com/twitter/news/296289.shtml 2012-02-21 16:18:42 - zfasel : 350 lines of javascript and html later, the jeopardy system for the @_dc312_ meeting is FINALLY READY AND TESTEDhttp://www.secuobs.com/twitter/news/296055.shtmlhttp://www.secuobs.com/twitter/news/296055.shtml 2012-02-20 05:39:08 - digininja : @ethicalhack3r I would shorten that to javascript is severely lackinghttp://www.secuobs.com/twitter/news/295741.shtmlhttp://www.secuobs.com/twitter/news/295741.shtml 2012-02-16 18:24:33 - ivanristic : RT @0x6D6172696F: Nullbytes in entities javascriptalert1 // http://tco/43et65sq discovered earlier here http://tco/O5bzsqWf #FFhttp://www.secuobs.com/twitter/news/294719.shtmlhttp://www.secuobs.com/twitter/news/294719.shtml 2012-02-10 18:58:40 - TimelessP : I can imagine some fun with that RT @eevee: also, in javascript, +0 and -0 are different dict keys, even though +0 == -0 and +0 === -0 :http://www.secuobs.com/twitter/news/292856.shtmlhttp://www.secuobs.com/twitter/news/292856.shtml 2012-02-08 17:20:33 - Netw0rkSecurity : #OWASP hack mig33 id xss javascript - Fanhow found 20 articles about hack mig33 id xss javascript on tuto http://tco/vNx6ktA2http://www.secuobs.com/twitter/news/291944.shtmlhttp://www.secuobs.com/twitter/news/291944.shtml 2012-02-06 21:08:17 - digininja : @threatagent Do you have a write up on how to use your javascript key loggerhttp://www.secuobs.com/twitter/news/291271.shtmlhttp://www.secuobs.com/twitter/news/291271.shtml 2012-02-04 06:04:15 - grantstavely : Deobsfucating javascript with monkeypatching s/;/;eval=alert;/g tricks is a thing, right Seems too obvious to be a new idea I just hadhttp://www.secuobs.com/twitter/news/290702.shtmlhttp://www.secuobs.com/twitter/news/290702.shtml 2012-01-31 09:42:18 - _coreDump : RT @xanda: RT @9bplus: JavaScript Encoder filled with AJAX is released http://tco/dLgx6UGd Write-up tomorrow #javascript #encoder #ajaxhttp://www.secuobs.com/twitter/news/289319.shtmlhttp://www.secuobs.com/twitter/news/289319.shtml 2012-01-31 07:27:28 - xanda : RT @9bplus: JavaScript Encoder filled with AJAX is released http://tco/dLgx6UGd Write-up tomorrow #javascript #encoder #ajaxhttp://www.secuobs.com/twitter/news/289302.shtmlhttp://www.secuobs.com/twitter/news/289302.shtml 2012-01-30 22:57:23 - ralfe : Seriouslyjs: Real-time Video Manipulation in JavaScript http://tco/5GaRvk5m #javascript #imageprocessing #videohttp://www.secuobs.com/twitter/news/289178.shtmlhttp://www.secuobs.com/twitter/news/289178.shtml 2012-01-25 11:54:01 - fmavituna : @antisnatchor Seems like other operators mostly fine, although I know that many of them inject javascript to all HTTP traffichttp://www.secuobs.com/twitter/news/287423.shtmlhttp://www.secuobs.com/twitter/news/287423.shtml 2012-01-25 09:38:26 - wadeis : RT @xek: https://tco/J4nYHzzN WAT, a delightful lightning talk that pokes fun at inanities in ruby and javascripthttp://www.secuobs.com/twitter/news/287385.shtmlhttp://www.secuobs.com/twitter/news/287385.shtml 2012-01-24 08:59:44 - xanda : RT @jedisct1: zipjs, a javascript library to zip and unzip files: http://tco/JvSFLzjMhttp://www.secuobs.com/twitter/news/286957.shtmlhttp://www.secuobs.com/twitter/news/286957.shtml 2012-01-24 07:45:51 - ramblinpeck : Needed, javascript that mimics Micheal Jacksons Black or White morphing in a passable way, anyone gothttp://www.secuobs.com/twitter/news/286917.shtmlhttp://www.secuobs.com/twitter/news/286917.shtml 2012-01-23 21:26:20 - johullrich : I did a quick analysis of the javascript DDoS tool that anymore started to use now http://tco/YB9Ph53Nhttp://www.secuobs.com/twitter/news/286725.shtmlhttp://www.secuobs.com/twitter/news/286725.shtml 2012-01-21 04:23:42 - aushack : @kevinmitnick 12 years ago I watched the free mitnick javascript clock count down :http://www.secuobs.com/twitter/news/286077.shtmlhttp://www.secuobs.com/twitter/news/286077.shtml 2012-01-19 02:24:10 - egyp7 : @cosine The blackout is implemented with javascript Took me a while to figure out what everyone was complaining about, toohttp://www.secuobs.com/twitter/news/285265.shtmlhttp://www.secuobs.com/twitter/news/285265.shtml 2012-01-18 10:06:35 - xanda : So en wikipedia org uses javascript to 'blackout' http://www.secuobs.com/twitter/news/284991.shtmlhttp://www.secuobs.com/twitter/news/284991.shtml 2012-01-18 05:17:33 - wycats : @TheAmazingRando los javascriptoshttp://www.secuobs.com/twitter/news/284931.shtmlhttp://www.secuobs.com/twitter/news/284931.shtml 2012-01-16 22:50:53 - digininja : Dear @37signals please fix your broken javascript that means when I enter a single quote in @basecampnews it tries to searchhttp://www.secuobs.com/twitter/news/284338.shtmlhttp://www.secuobs.com/twitter/news/284338.shtml 2012-01-15 22:47:38 - dotrandomcode : RT @del_javascript: Large-scale JavaScript Application Architecture // Speaker Deck http://tco/ulsV1emvhttp://www.secuobs.com/twitter/news/284059.shtmlhttp://www.secuobs.com/twitter/news/284059.shtml 2012-01-15 22:03:21 - curphey : RT @del_javascript: Large-scale JavaScript Application Architecture // Speaker Deck http://tco/ulsV1emvhttp://www.secuobs.com/twitter/news/284040.shtmlhttp://www.secuobs.com/twitter/news/284040.shtml 2012-01-10 22:38:44 - michaelwilde : @GeoIQ so can i basically send a table of points to you on demand in javascript and get a map backhttp://www.secuobs.com/twitter/news/282464.shtmlhttp://www.secuobs.com/twitter/news/282464.shtml 2012-01-09 23:19:24 - craignewell : Anyone good with javascript I need two chunks of code merged to integrate functionalityhttp://www.secuobs.com/twitter/news/282142.shtmlhttp://www.secuobs.com/twitter/news/282142.shtml 2012-01-07 03:33:59 - k0st : RT @WeldPond: Keystroke logging in web apps without needing javascript http://tco/Q7hw7fn7http://www.secuobs.com/twitter/news/281388.shtmlhttp://www.secuobs.com/twitter/news/281388.shtml 2012-01-06 15:04:41 - DFMag : Intro to javascript malware analysis http://tco/RX9ySpNG Good article with Videohttp://www.secuobs.com/twitter/news/281163.shtmlhttp://www.secuobs.com/twitter/news/281163.shtml 2012-01-05 22:50:03 - theharmonyguy : Remember, XSS is not just about scripting By @0x6D6172696F: RT @jeremiahg browser keystroke logger w/o javascript: http://tco/JTzFSYrnhttp://www.secuobs.com/twitter/news/281024.shtmlhttp://www.secuobs.com/twitter/news/281024.shtml 2012-01-05 22:26:37 - carne : RT @theharmonyguy: Remember, XSS is not just about scripting By @0x6D6172696F: RT @jeremiahg browser keystroke logger w/o javascript: h http://www.secuobs.com/twitter/news/281022.shtmlhttp://www.secuobs.com/twitter/news/281022.shtml 2012-01-05 19:33:25 - jeremiahg : browser keystroke logger w/o javascript: html5secorg/#132 what the hell can NoScript do about thishttp://www.secuobs.com/twitter/news/280963.shtmlhttp://www.secuobs.com/twitter/news/280963.shtml 2012-01-05 15:08:35 - dacort : @busterbenson There's a hack on TweetStats that can search - on the word cloud page, put javascript:search#hashtag in URL barhttp://www.secuobs.com/twitter/news/280885.shtmlhttp://www.secuobs.com/twitter/news/280885.shtml 2012-01-05 13:18:03 - dloss : RT @frontendstuff: “@jcleblanc: The craziest Javascript implementations http://tco/JhMeOj2f #javascript”http://www.secuobs.com/twitter/news/280799.shtmlhttp://www.secuobs.com/twitter/news/280799.shtml 2012-01-03 02:27:40 - mckt_ : RT @mrdoob: jsjs - a javascript interpreter in javascript https://tco/uObIbapShttp://www.secuobs.com/twitter/news/280018.shtmlhttp://www.secuobs.com/twitter/news/280018.shtml 2012-01-03 00:57:15 - ramblinpeck : @mrdoob: jsjs - a javascript interpreter in javascript https://tco/Z0um98i3 - dear God whyhttp://www.secuobs.com/twitter/news/279997.shtmlhttp://www.secuobs.com/twitter/news/279997.shtml 2011-12-31 22:46:15 - MarioVilas : RT @Blackmond_: Hash collisions in POST: Denial-of-service exploit javascript demo for PHP - http://tco/T3L9XX1Ihttp://www.secuobs.com/twitter/news/279580.shtmlhttp://www.secuobs.com/twitter/news/279580.shtml 2011-12-29 00:33:52 - opexxx : javascript-toolstmbundle - GitHub http://tco/G2cBzZaXhttp://www.secuobs.com/twitter/news/278927.shtmlhttp://www.secuobs.com/twitter/news/278927.shtml 2011-12-28 22:10:51 - Jason_Wood : @jimbosway @sprawl3 @jaredude Heh, not that geeky I'll reserve that for the guys I see sending tweets entirely in javascript ;-http://www.secuobs.com/twitter/news/278896.shtmlhttp://www.secuobs.com/twitter/news/278896.shtml 2011-12-28 17:42:53 - opexxx : RT @priyanshu_itech: Intro to javascript malware analysis http://tco/kvlAQqZf #Security #Malware #javascripthttp://www.secuobs.com/twitter/news/278859.shtmlhttp://www.secuobs.com/twitter/news/278859.shtml 2011-12-27 15:04:24 - y0m : RT @mruef: Suggested Reading: Intro to javascript malware analysis http://tco/rOMuVlJr | http://tco/FQbQasgvhttp://www.secuobs.com/twitter/news/278533.shtmlhttp://www.secuobs.com/twitter/news/278533.shtml 2011-12-27 10:13:54 - mruef : Suggested Reading: Intro to javascript malware analysis http://tco/rOMuVlJr | http://tco/FQbQasgvhttp://www.secuobs.com/twitter/news/278508.shtmlhttp://www.secuobs.com/twitter/news/278508.shtml 2011-12-27 03:00:04 - dotrandomcode : RT @mubix: #SharedLinks Intro to javascript malware analysis http://tco/Kah2rG4Whttp://www.secuobs.com/twitter/news/278465.shtmlhttp://www.secuobs.com/twitter/news/278465.shtml 2011-12-27 02:13:31 - grecs : RT @mubix Intro 2 javascript malware analysis http://tco/sMwJkqIQ //Good stuffhttp://www.secuobs.com/twitter/news/278454.shtmlhttp://www.secuobs.com/twitter/news/278454.shtml 2011-12-27 01:04:03 - mubix : #SharedLinks Intro to javascript malware analysis http://tco/Kah2rG4Whttp://www.secuobs.com/twitter/news/278442.shtmlhttp://www.secuobs.com/twitter/news/278442.shtml 2011-12-22 08:22:34 - Mephux : @postmodern_mod3 i write html i just compile it to javascript function…blahblah datarender'template_name'http://www.secuobs.com/twitter/news/277453.shtmlhttp://www.secuobs.com/twitter/news/277453.shtml 2011-12-21 07:40:08 - xanda : RT @jeremiahg: NoScript author @ma1 scores w/ his own version of javascript-less detection: http://tco/L47dKJMzhttp://www.secuobs.com/twitter/news/277116.shtmlhttp://www.secuobs.com/twitter/news/277116.shtml 2011-12-21 02:35:54 - jeremiahg : NoScript author @ma1 scores w/ his own version of javascript-less detection: http://tco/ywEzQEVdhttp://www.secuobs.com/twitter/news/277102.shtmlhttp://www.secuobs.com/twitter/news/277102.shtml 2011-12-20 19:23:27 - jeremiahg : @the_bc Your javascript-less NoScript detector looks like it works to me http://tco/WZWon8O9 @ma1 what do you thinkhttp://www.secuobs.com/twitter/news/276929.shtmlhttp://www.secuobs.com/twitter/news/276929.shtml 2011-12-19 21:04:07 - ax0n : My fun last weekend: RT @H_i_R: Intro to javascript malware analysis http://tco/vwHFvuJohttp://www.secuobs.com/twitter/news/276571.shtmlhttp://www.secuobs.com/twitter/news/276571.shtml 2011-12-18 04:50:35 - H_i_R : New post on HiR: Intro to javascript malware analysis http://tco/OzSvm3tOhttp://www.secuobs.com/twitter/news/276222.shtmlhttp://www.secuobs.com/twitter/news/276222.shtml 2011-12-18 03:03:28 - opexxx : Intro to javascript malware analysis http://tco/jzj0o1dHhttp://www.secuobs.com/twitter/news/276203.shtmlhttp://www.secuobs.com/twitter/news/276203.shtml 2011-12-12 00:36:20 - ioerror : @secorp I've thought about it but I sorta prefer the idea of a Hidden Service over javascripthttp://www.secuobs.com/twitter/news/274201.shtmlhttp://www.secuobs.com/twitter/news/274201.shtml 2011-12-06 19:25:55 - theharmonyguy : RT @paul_irish: http://tco/dIlIYYsc features a snappy search UI to all of MDN's javascript/css/html/dom documentation Very nicehttp://www.secuobs.com/twitter/news/272334.shtmlhttp://www.secuobs.com/twitter/news/272334.shtml 2011-12-05 01:31:25 - postmodern_mod3 : RT @judofyr: if you need to write cross-browser javascript without jQuery, this is a great checklist to follow: http://tco/6OBKh4m8http://www.secuobs.com/twitter/news/271730.shtmlhttp://www.secuobs.com/twitter/news/271730.shtml 2011-11-30 22:42:29 - tqbf : @capotej My partials are all, :css block on top, :javascript block on the bottomhttp://www.secuobs.com/twitter/news/270450.shtmlhttp://www.secuobs.com/twitter/news/270450.shtml 2011-11-26 00:40:41 - ax0n : Malware Analysis: Sup dawg I, heard you like javascript editionhttp://www.secuobs.com/twitter/news/269168.shtmlhttp://www.secuobs.com/twitter/news/269168.shtml 2011-11-24 07:28:26 - mubix : RT @garethheyes: How do you know you spend too much time in javascript You end sentences with ; instead of by mistakehttp://www.secuobs.com/twitter/news/268690.shtmlhttp://www.secuobs.com/twitter/news/268690.shtml 2011-11-23 12:31:28 - xanda : @shafigullin i think not all javascript but only 'javascript' in the browser URL barhttp://www.secuobs.com/twitter/news/268429.shtmlhttp://www.secuobs.com/twitter/news/268429.shtml 2011-11-23 12:31:28 - xanda : @shafigullin that one that will be removed is the support of executing javascript: in the url barhttp://www.secuobs.com/twitter/news/268428.shtmlhttp://www.secuobs.com/twitter/news/268428.shtml 2011-11-23 12:31:28 - xanda : @shafigullin we maybe not you and me but for some reason,a few facebook 'worm' lately use javascript: to make fool of people and abuse emhttp://www.secuobs.com/twitter/news/268427.shtmlhttp://www.secuobs.com/twitter/news/268427.shtml 2011-11-23 09:14:38 - dragosr : @thierryzoller @jrossi @tqbf while I agree with @matasano's summation that javascript impl is attackable, attackable plaintext storagehttp://www.secuobs.com/twitter/news/268381.shtmlhttp://www.secuobs.com/twitter/news/268381.shtml 2011-11-23 06:02:12 - adamjodonnell : @dragosr Do you want to expose your secret key to your javascript enginehttp://www.secuobs.com/twitter/news/268338.shtmlhttp://www.secuobs.com/twitter/news/268338.shtml 2011-11-19 16:29:20 - ethicalhack3r : @fmavituna like the way he got round the chrome copy + paste of 'javascript' to the address bar press j then pastehttp://www.secuobs.com/twitter/news/267424.shtmlhttp://www.secuobs.com/twitter/news/267424.shtml 2011-11-18 19:30:44 - BrandenWilliams : @jameskadamson hehe this one was similar when I get through the morning workload going to try and decode the javascript from this onehttp://www.secuobs.com/twitter/news/267220.shtmlhttp://www.secuobs.com/twitter/news/267220.shtml 2011-11-17 11:23:44 - getwired : RT @jeremiahg: RT @bsterne: @jeremiahg Chrome IE started blocking pasting of javascript: Attack evolved to type 'j' then paste this http://www.secuobs.com/twitter/news/266660.shtmlhttp://www.secuobs.com/twitter/news/266660.shtml 2011-11-17 10:31:29 - jeremiahg : Facebook Claims Porn Barrage Is Under Control http://tco/6Pb1zzoa self-inflicted XSS copy/pasting javascript: linkshttp://www.secuobs.com/twitter/news/266656.shtmlhttp://www.secuobs.com/twitter/news/266656.shtml 2011-11-17 10:31:29 - jeremiahg : Maybe w; JS FB could monitor when their users try to copy/paste links w/ javascript: strings in them or something Worth a testhttp://www.secuobs.com/twitter/news/266655.shtmlhttp://www.secuobs.com/twitter/news/266655.shtml 2011-11-17 10:31:29 - jeremiahg : RT @bsterne: @jeremiahg Chrome IE started blocking pasting of javascript: Attack evolved to type 'j' then paste this avascript: URLLOLhttp://www.secuobs.com/twitter/news/266653.shtmlhttp://www.secuobs.com/twitter/news/266653.shtml 2011-11-16 09:27:12 - Mephux : @postmodern_mod3 64 pourcents of page load time is http if i can beat that building my site client-side i will enable javascript alreadyhttp://www.secuobs.com/twitter/news/266290.shtmlhttp://www.secuobs.com/twitter/news/266290.shtml 2011-11-14 23:44:05 - hrbrmstr : @thesleepyvegan it's admittedly, mind you ugly code inefficient loop sloppy way to move objects to javascript, etc I may refactor :-http://www.secuobs.com/twitter/news/265826.shtmlhttp://www.secuobs.com/twitter/news/265826.shtml 2011-11-11 21:59:52 - Jhaddix : Nmap OnePage – javascript viewer for nmap output - http://tco/xMPxFIbhhttp://www.secuobs.com/twitter/news/265236.shtmlhttp://www.secuobs.com/twitter/news/265236.shtml 2011-11-11 16:17:41 - DinisCruz : The question is how to use this power RT @del_javascript: javascript - Ways to circumvent the same-origin policy - SO http://tco/5G0CKVkghttp://www.secuobs.com/twitter/news/265160.shtmlhttp://www.secuobs.com/twitter/news/265160.shtml 2011-11-11 13:37:37 - curphey : RT @del_javascript: javascript - Ways to circumvent the same-origin policy - Stack Overflow http://tco/WfRgzrD8http://www.secuobs.com/twitter/news/265122.shtmlhttp://www.secuobs.com/twitter/news/265122.shtml 2011-11-11 11:56:43 - xntrik : RT @del_javascript: javascript - Ways to circumvent the same-origin policy - Stack Overflow http://tco/WfRgzrD8http://www.secuobs.com/twitter/news/265113.shtmlhttp://www.secuobs.com/twitter/news/265113.shtml 2011-11-09 16:37:48 - theharmonyguy : @skeptic_fx Ah, correct - I didn't realize Firefox had removed execution of javascript: URLs in the address bar with version 6http://www.secuobs.com/twitter/news/264243.shtmlhttp://www.secuobs.com/twitter/news/264243.shtml 2011-11-08 08:23:55 - CiscoSecurity : A look inside a piece of obfuscated javascript malware http://tco/gchbIncUhttp://www.secuobs.com/twitter/news/263895.shtmlhttp://www.secuobs.com/twitter/news/263895.shtml 2011-11-08 02:47:06 - randomdross : @markwo Deep memory level javascript FTWhttp://www.secuobs.com/twitter/news/263813.shtmlhttp://www.secuobs.com/twitter/news/263813.shtml 2011-11-07 23:33:25 - CERTXMCO : RT @CiscoSecurity: A look inside a piece of obfuscated javascript malware http://tco/gchbIncUhttp://www.secuobs.com/twitter/news/263744.shtmlhttp://www.secuobs.com/twitter/news/263744.shtml 2011-11-07 22:27:35 - mbenlakhoua : RT @CiscoSecurity: A look inside a piece of obfuscated javascript malware http://tco/gchbIncUhttp://www.secuobs.com/twitter/news/263689.shtmlhttp://www.secuobs.com/twitter/news/263689.shtml 2011-11-07 19:43:11 - CiscoSecurity : A look inside a piece of obfuscated javascript malware http://tco/gchbIncUhttp://www.secuobs.com/twitter/news/263629.shtmlhttp://www.secuobs.com/twitter/news/263629.shtml