apples, penguins and a window to another world

xss

servage xss collage

servage xss collage

Sometimes a picture says more than 1000 words.

template to report xss vulnerabilities

As tech savy (security focussed) Internet citizen i'm often tinkering with sites using manual or automated techniques. Often there are issues, mostly regarding XSS. Discovering of websites prone to XSS attacks is no supreme discipline (especially if your Name is eg Gareth Heyes), but the tedious task of reporting them is.

Enough written, following is a short XSS Report Template to report such issues directly to  the website owners:

apple website simple xss

While reading a bit in The Mac Hacker's Handbook and hacking some Cocoa with Xcode, i was browsing the Apple Developer Connection. Bored by this rainy tuesday afternoon, i did a quick audit of the advanced search form.