Loading video...

Video Failed to Load

Go Home

We’ve created a lab to demonstrate how an OAuth token can be leaked using a referrer policy override. Check out the article and try the lab here

AmirMSafari's profile picture

AmirMohammad Safari

8,308 subscribers

27,727 views • 1 year ago •via X (Twitter)

Science & TechnologyNews & PoliticsEducation
LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

"All the 'no lab coat, no entry,' and we still can't find a decent job. Here I am using the lab coat to work as a Baba Ijebu agent" - Nigerian lady fumes.
0:13

"All the 'no lab coat, no entry,' and we still can't find a decent job. Here I am using the lab coat to work as a Baba Ijebu agent" - Nigerian lady fumes.

YabaLeftOnline

164,251 views • 5 months ago

In our NahamCon talk, we demonstrated how punycode email addresses can impact OAuth implementations. MySQL + GitLab OAuth by default can lead to zero-click account takeover. 🔍 Check out the demo app here:
0:15

In our NahamCon talk, we demonstrated how punycode email addresses can impact OAuth implementations. MySQL + GitLab OAuth by default can lead to zero-click account takeover. 🔍 Check out the demo app here:

AmirMohammad Safari

23,153 views • 1 year ago

Cooper DeJean might be the GREATEST white athlete of all time. He had to be created in a lab 🤯
0:13

Cooper DeJean might be the GREATEST white athlete of all time. He had to be created in a lab 🤯

Dov Kleiman

508,658 views • 1 year ago

TOP CEXES ARE BACKING THE $LAB PONZI $LAB lost half its market cap in a single day But 8 hours later, it bounced back by $2B How can a token with zero utility pull off something like this? Everyone knows it's a crime cabal of a few exchanges and MMs But nobody is doing anything about it If you have any positions left in $LAB - sell.
0:18

TOP CEXES ARE BACKING THE $LAB PONZI $LAB lost half its market cap in a single day But 8 hours later, it bounced back by $2B How can a token with zero utility pull off something like this? Everyone knows it's a crime cabal of a few exchanges and MMs But nobody is doing anything about it If you have any positions left in $LAB - sell.

ProMint

19,212 views • 3 months ago

Using the Open Cloud, #Roblox Creators can now build third-party applications using OAuth 2.0 that can be used by the rest of the community. Read more: Learn how to get started:
0:14

Using the Open Cloud, #Roblox Creators can now build third-party applications using OAuth 2.0 that can be used by the rest of the community. Read more: Learn how to get started:

Bloxy News

61,316 views • 3 years ago

Fresh off the press. Great cooperation with the Ravoo lab where we could demonstrate a new optically triggered molecular switch to change membrane area within milliseconds. Check it out at Nat. Com.🥳: Next step: Optical switch of membrane tension!🤩
0:19

Fresh off the press. Great cooperation with the Ravoo lab where we could demonstrate a new optically triggered molecular switch to change membrane area within milliseconds. Check it out at Nat. Com.🥳: Next step: Optical switch of membrane tension!🤩

BetzLab

47,886 views • 3 years ago

EXCLUSIVE: For the past 3 months I've been tracking the development of Orca 🌊's upcoming new launchpad called Wavebreak. It's a unique launchpad that uses an anti-bot mechanism to prevent snipers & bots. Using google captcha generation, tokens can only be created and bought on their launchpad UI at: I'm calling $ROCKET, the first token ever created on Orca Wavebreak! CA here: To further verify it's the first token, you can see the API sorted from oldest to newest here: Orca will be rewarding Wavebreak traders with a share of all graduated tokens in the pool. See screenshot for details!
0:12

EXCLUSIVE: For the past 3 months I've been tracking the development of Orca 🌊's upcoming new launchpad called Wavebreak. It's a unique launchpad that uses an anti-bot mechanism to prevent snipers & bots. Using google captcha generation, tokens can only be created and bought on their launchpad UI at: I'm calling $ROCKET, the first token ever created on Orca Wavebreak! CA here: To further verify it's the first token, you can see the API sorted from oldest to newest here: Orca will be rewarding Wavebreak traders with a share of all graduated tokens in the pool. See screenshot for details!

TrenchDiver

50,732 views • 1 year ago

$OnlyMarms Update for the end of Day 2 🦫 The receipts just keep stacking up. Since yesterday... 📺 The token has now been mentioned LIVE on television for the second time, this time on NBC. ( 🎙️ The story has now reached radio, with its first major interview airing on Radio-Canada. ( 🌐 The M.A.D. Lab has created an official OnlyMarms page on its website, documenting the community initiative and bringing everything together in one place. ( 📰 And more media outlets continue picking up the story by the hour - from major newspapers to university publications and international outlets. Take a step back for a second. $OnlyMarms sends a message and sets a statement: Meme coins can do good, and Meme coins can have real-world impact. It is the first time in a while, that we see positive media reports on a meme coin. This isn't a a simple meme that we have invented, it is actually a real world problem that we got to turn into a Crypto narrative to help the M.A.D Lab with fundraising, and awareness. The Pump.fun community, together against a real-world problem. A wildlife research lab founded in 1962 lost critical government funding after more than 60 years of continuous research. The community built around that mission. Now, every TV appearance, every radio interview, every news article, and every official update from the lab brings more attention - not just to the token, but to the research itself and the main issue: get the Lab their funding back. This is what makes OnlyMarms different. The narrative doesn't depend on price action, this is bigger than that. It evolves every time the world learns about the story. For the first time in a while, we have a narrative that I think can send a message and set a statement: Meme coins can do good, and Meme coins can have real-world impact. It is the first time in a while, that we see positive media reports on a meme coin. 🦫 Official M.A.D. Lab OnlyMarms page: 🌍 Community Website: Community Chat for raids and bagworking: Official Linktree: CA: HBrfYZgeLKdSvBBGnGkvAK4563pq8oBGpgNFAaespump Also we set up an official account where more marmot content will be posted: OnlyMarms
0:18

$OnlyMarms Update for the end of Day 2 🦫 The receipts just keep stacking up. Since yesterday... 📺 The token has now been mentioned LIVE on television for the second time, this time on NBC. ( 🎙️ The story has now reached radio, with its first major interview airing on Radio-Canada. ( 🌐 The M.A.D. Lab has created an official OnlyMarms page on its website, documenting the community initiative and bringing everything together in one place. ( 📰 And more media outlets continue picking up the story by the hour - from major newspapers to university publications and international outlets. Take a step back for a second. $OnlyMarms sends a message and sets a statement: Meme coins can do good, and Meme coins can have real-world impact. It is the first time in a while, that we see positive media reports on a meme coin. This isn't a a simple meme that we have invented, it is actually a real world problem that we got to turn into a Crypto narrative to help the M.A.D Lab with fundraising, and awareness. The Pump.fun community, together against a real-world problem. A wildlife research lab founded in 1962 lost critical government funding after more than 60 years of continuous research. The community built around that mission. Now, every TV appearance, every radio interview, every news article, and every official update from the lab brings more attention - not just to the token, but to the research itself and the main issue: get the Lab their funding back. This is what makes OnlyMarms different. The narrative doesn't depend on price action, this is bigger than that. It evolves every time the world learns about the story. For the first time in a while, we have a narrative that I think can send a message and set a statement: Meme coins can do good, and Meme coins can have real-world impact. It is the first time in a while, that we see positive media reports on a meme coin. 🦫 Official M.A.D. Lab OnlyMarms page: 🌍 Community Website: Community Chat for raids and bagworking: Official Linktree: CA: HBrfYZgeLKdSvBBGnGkvAK4563pq8oBGpgNFAaespump Also we set up an official account where more marmot content will be posted: OnlyMarms

Miggl

106,565 views • 1 month ago

How are you using your lasso? 🤠 pjay_scribbles shares an incredible tip on how to practice anatomy with the lasso fill! Check the artist out here:
0:15

How are you using your lasso? 🤠 pjay_scribbles shares an incredible tip on how to practice anatomy with the lasso fill! Check the artist out here:

CLIP STUDIO PAINT

11,646 views • 1 year ago

Monday is Leg Day. Bret Contreras, PhD took me through a description of frequency, sets, reps, and how to tailor a program to your unique needs. This accompanies the Huberman lab podcast out now (all platforms). And workout is on Huberman Lab Clips channel on YT. Don’t skip leg day.
0:11

Monday is Leg Day. Bret Contreras, PhD took me through a description of frequency, sets, reps, and how to tailor a program to your unique needs. This accompanies the Huberman lab podcast out now (all platforms). And workout is on Huberman Lab Clips channel on YT. Don’t skip leg day.

Andrew D. Huberman, Ph.D.

189,518 views • 11 months ago

Created an off-axis projection demo using mediapipe for face tracking, threejs and a 3D scanned shoe. Try it out yourself…
0:16

Created an off-axis projection demo using mediapipe for face tracking, threejs and a 3D scanned shoe. Try it out yourself…

Ian Curtis

264,271 views • 8 months ago

Researchers from the The Clevers Lab developed a method to grow organoids using a bacterial protein: Invasin. The study, published today in PNASNews, shows that Invasin offers a sustainable, affordable and animal-free alternative to current methods.
0:10

Researchers from the The Clevers Lab developed a method to grow organoids using a bacterial protein: Invasin. The study, published today in PNASNews, shows that Invasin offers a sustainable, affordable and animal-free alternative to current methods.

Hubrecht Institute

18,354 views • 1 year ago

Hey OGs, Inflectiv Alpha just dropped 🚨 Try it out here 👉 The wait is over! Here’s what you need to know, what you can do, how to launch a dataset, and how to be early in the right way. 👇
0:17

Hey OGs, Inflectiv Alpha just dropped 🚨 Try it out here 👉 The wait is over! Here’s what you need to know, what you can do, how to launch a dataset, and how to be early in the right way. 👇

Inflectiv AI ⧉

147,806 views • 1 year ago

𝗔𝗻𝘆𝗼𝗻𝗲 𝗰𝗮𝗻 𝗹𝗮𝘂𝗻𝗰𝗵 𝗮 𝗠𝟯𝗠𝟯. We’ve just updated the ‘Mint a coin’ interface to allow creators to launch a M3M3, with or without an existing token. Here's how you can mint a coin, create a pool, and launch a M3M3 in one simple process: 👇
0:13

𝗔𝗻𝘆𝗼𝗻𝗲 𝗰𝗮𝗻 𝗹𝗮𝘂𝗻𝗰𝗵 𝗮 𝗠𝟯𝗠𝟯. We’ve just updated the ‘Mint a coin’ interface to allow creators to launch a M3M3, with or without an existing token. Here's how you can mint a coin, create a pool, and launch a M3M3 in one simple process: 👇

Meteora

30,064 views • 1 year ago

Just unearthed a piece of tech history that'll blow your mind. Meet Warren McCulloch, the genius Yale Graduate, Neuropsychologist, Cybernetician, and MIT Researcher, who created the first Neural Network in an MIT Research Lab (1943) :
0:11

Just unearthed a piece of tech history that'll blow your mind. Meet Warren McCulloch, the genius Yale Graduate, Neuropsychologist, Cybernetician, and MIT Researcher, who created the first Neural Network in an MIT Research Lab (1943) :

ₕₐₘₚₜₒₙ

273,230 views • 1 year ago

Using sliders like this one can be useful when modelling multiplying and dividing by 10, 100 and 1000 to demonstrate that all the digits move the same amount of place value columns, to show how the value of each digit changes and to examine the purpose of a place holder.
0:15

Using sliders like this one can be useful when modelling multiplying and dividing by 10, 100 and 1000 to demonstrate that all the digits move the same amount of place value columns, to show how the value of each digit changes and to examine the purpose of a place holder.

Sarah Farrell

158,948 views • 3 years ago

Just created a Cybertruck trailer with GTA VI vibes using Grok. It's incredible how a single prompt can turn an idea into a cinematic, game-quality trailer with AI. The future of filmmaking is here. 🚀
0:10

Just created a Cybertruck trailer with GTA VI vibes using Grok. It's incredible how a single prompt can turn an idea into a cinematic, game-quality trailer with AI. The future of filmmaking is here. 🚀

Tesla Owners Silicon Valley

18,733 views • 2 months ago

The anatomy of Mr. Boss needs to be studied in a lab somewhere because what the fuck do you mean?!?!
0:17

The anatomy of Mr. Boss needs to be studied in a lab somewhere because what the fuck do you mean?!?!

Dilly!

337,978 views • 9 months ago

SwiftUI is a design tool from the future. For #WWDC23, Will Danner and I gave a talk on how we’ve been using it to design Apple Maps, and how you can do the same! Full video:
0:15

SwiftUI is a design tool from the future. For #WWDC23, Will Danner and I gave a talk on how we’ve been using it to design Apple Maps, and how you can do the same! Full video:

Philip Davis

454,367 views • 3 years ago