PinnedLuke Younginbetter appsecBuilding a WebAuthn Click Farm — Are CAPTCHAs Obsolete?How I built a click farm to “bypass” Cloudflare’s CAPTCHA killer with some cheap USB security keys, an Arduino, and a bit of python.9 min read·Jun 10, 2021--1--1
Luke Younginbored.engineerXSS on account.leagueoflegends.com via easyXDM [2016]This post contains a chain of vulnerabilities I responsibly disclosed to Riot Games in November of 2016. I’m publicly disclosing it now as…9 min read·Dec 1, 2022--1--1
Luke Younginbored.engineerDEF CON 24: Slides and ExploitHere’s the slides and exploits from the DEF CON 24 talk in Las Vegas, NV. Video to follow in a few weeks.1 min read·Aug 6, 2016----
Luke Younginbored.engineergit init && git commit -a -m “Initial Commit”I decided to relaunch my blog with my recent domain name change. It’s unlikely I will migrate the old content, but look forward to my…1 min read·Jul 22, 2016--1--1