DEF CON 30 - James Kettle - Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling

[@CU.SpaceCowboy]

one of THE BEST bug hunters of all time. he’s legendary

[@Jango1989]

Great talk! I always look forward to hearing James' latest hacks.

[@apristen]

13:23 "So if I'd used the head technique to *execute* JavaScript" - in user's browser? how? where to read about this? thanks in advance!

[@Buttclown-vz9vk]

He explains it later in the talk

[@kingcomedy5491]

What happened with turbo intruder nowadays not working

[@Thiago1337]

It works fine, what do you mean?

[@October-fo3bz]

I waited for this talk for so long, still BH didn't release their talks smh :/

[@thewhitefalcon8539]

But most of all, Bezos is my hero. (13:30)

[@pinskiller9914]

I wish he could better express what he's doing. sounds like a confusing random mixture of thoughts