lyra's epic blog!

[](/lyrahai)5 years ago, back when I still used Reddit, something unusual happened.

Previously titled: “SVG Filters - Clickjacking 2.0” Clickjacking is a classic attack that consists of covering up an iframe of some other website in an attempt to trick the user into unintentionally interacting with it.

So much of the web these days is ruined by the bloat that is modern JavaScript frameworks.

In my security research I often come across weird quirks and behaviours that aren’t particularly useful beyond a neat party trick.

Despite having 7 Chrome CVEs, I’ve never actually fully exploited a memory corruption in its V8 JavaScript engine before.

Say you handed me your phone, what’s the worst I could do in 10 seconds?