Manuel Caballero
brokenbrowser.com · Personal blog · on HN since 2016
Manuel Caballero, a security researcher, documents browser vulnerabilities in Internet Explorer and Edge, such as SOP bypass and address bar spoofing.
What HN saysCommenters cite it for Edge and IE bugs such as referrer spoofing, as evidence that browser flaws undermine origin-based protections.
15HN people shared it
3linked it in comments
15stories submitted
394story points
9 years agolast shared
2016people per year2026
Most-shared posts
- 1Abusing Protocols to Load Local Files, Bypass the HTML5 Sandbox, Open Popups3 people · 328 points · first shared 2016 · 43 comments on HN
- 2Referrer spoofing with iframe injection (IE)3 people · 1 points · first shared 2017 · 1 comments on HN
- 3SOP Bypass / UXSS – Stealing Credentials Pretty Fast (Edge)2 people · 4 points · first shared 2017 · discussion on HN
- 4Revealing the content of the address bar in IE1 people · 46 points · first shared 2017 · 9 comments on HN
- 5Spoofing the Address Bar with the Malware Warning1 people · 5 points · first shared 2016 · discussion on HN
- 6The Attack of the Alerts and the Zombie Script1 people · 2 points · first shared 2017 · discussion on HN
- 7Bypassing the patch to continue spoofing the address bar and the Malware Warning1 people · 2 points · first shared 2017 · discussion on HN
- 8Spoofing the Address Bar with the Malware Warning1 people · 1 points · first shared 2016 · discussion on HN
- 9SOP Bypass / UXSS – Tweeting Like Charles Darwin (Edge)1 people · 1 points · first shared 2017 · discussion on HN
- 10UXSS – CrossDomain in Microsoft Edge1 people · 1 points · first shared 2016 · discussion on HN
- 11UXSS/SOP bypass on Internet Explorer1 people · 1 points · first shared 2017 · discussion on HN
- 12Detecting analysts before installing malware1 people · 1 points · first shared 2016 · discussion on HN
- 13Edge – SOP bypass courtesy of the reading mode1 people · 1 points · first shared 2017 · discussion on HN
What HN people wrote when they linked it
g00gler · 2016-11-29
Yes, this exactly. If anyone cared to check out the advanced configuration it is pretty much exclusively turning off security vulnerabilities.
One of them is "Automatically trust WiFi connections my contacts trust", a bunch of others are sending data to Microsoft. It's been a few months since I turned on a new Windows 10 PC but I was completely turned off by the advanced configuration.
The #3 story on HN right now is "Windows 10 in-place upgrades are a severe security risk"
I thought this was a good read the other day https://www.brokenbrowser.com/abusing-of-protocols/
It just seems terrible security wise, the OS itself is spyware.
That is to say, I was excited to be trying out a sexy new Asus Ultrabook with Ubuntu mixed in but didn't care to try after setting it up.
remotelifestyle · 2017-10-05
Edge is not a good browser. It is holding the web back with its slow adoption of HTML5 standards. (source: https://html5test.com/compare/browser/chrome-58/edge-12.html)
Edge still has a spoof referrer header vulnerability that's been known for more than 6 months now: https://www.brokenbrowser.com/referer-spoofing-patch-bypass/
arkadiyt · 2017-06-13
I used to prefer the origin/referer approach to blocking CSRF because it can be done upstream of the application server (or in a middleware), transparent to developers who often get these things wrong.
However there's been enough referer spoofing browser bugs lately that I'd rather have the extra safety (and complexity) of CSRF tokens. Just 3 months ago Edge had (another) referer spoofing bug:
https://www.brokenbrowser.com/referer-spoofing-patch-bypass/