Hacker Blogs
Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #7090

J

Jack

Personal blog · fin1te.netsecurity

Jack is a personal blog at fin1te.net about security. Since 2015, 11 different Hacker News readers have linked it 11 times, most often “An XSS on Facebook via PNGs and Wonky Content Types”. The last post was in 2020, but the archive is still widely read.

Visit the blog
11mentions?
11HN people?
2015–2016first – last linked?
Links on Hacker News per year · peak 9 in 2016

Too few sampled comments (1) to say how often HN recommends it.?

Why HN links it

HN readers link Jack's write-up of an XSS vulnerability on Facebook involving PNG images and wonky content types. The comment summarises the post's account of Facebook's quick fix, removing a forward DNS entry for photo.facebook.com.

Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Bug Bounty & Application Security

Most-linked posts?

  1. An XSS on Facebook via PNGs and Wonky Content Types
    6 people · 6 mentions · first linked 2016-01-28
  2. Uber Bug Bounty: Turning Self-XSS into Good-XSS
    2 people · 2 mentions · first linked 2016-03-22

What Hacker News says?

  1. SixSigma · 2016-03-17
    From TFA Fix Facebook quickly hot-fixed the issue by removing the forward DNS entry for photo.facebook.com. https://fin1te.net/images/facebookxss/facebook-xss-12.png

    Comment linking /images/facebookxss/facebook-xss-12.png

    on “An XSS on Facebook via PNGs and Wonky Content Types”
  2. renke1 · 2016-03-16

    Submitted An XSS on Facebook via PNGs and Wonky Content Types as a story · 309 points

    HN discussion
  3. dsr12 · 2016-01-28

    Submitted An XSS on Facebook via PNGs and Wonky Content Types as a story · 13 points

    HN discussion
  4. ssclafani · 2015-07-26

    Submitted Bypassing Google Authentication on Periscope's Administration Panel as a story · 5 points

    HN discussion
  5. adamnemecek · 2016-01-29

    Submitted An XSS on Facebook via PNGs and Wonky Content Types as a story · 4 points

    HN discussion
  6. fin1te · 2016-01-30

    Submitted An XSS on Facebook via PNGs and Wonky Content Types as a story · 3 points

    HN discussion
  7. phwd · 2016-03-22

    Submitted Uber Bug Bounty: Turning Self-XSS into Good-XSS as a story · 2 points

    HN discussion
  8. moklick · 2016-01-31

    Submitted An XSS on Facebook via PNGs and Wonky Content Types as a story · 2 points

    HN discussion
  9. adrileba · 2015-08-10

    Submitted Bug Bounty Hunting: The Silver Bullet as a story · 2 points

    HN discussion
  10. cujanovic · 2016-03-23

    Submitted Uber Bug Bounty: Turning Self-XSS into Good-XSS as a story · 1 points

    HN discussion
  11. artf · 2016-02-01

    Submitted An XSS on Facebook via PNGs and Wonky Content Types as a story · 1 points

    HN discussion

Search all of HN for fin1te.net