Top all-time · #13441
Matan-h
Personal blog · matan-h.comsecurityprogramming
Matan-h is a personal blog at matan-h.com about security and programming. Since 2023, 5 different Hacker News readers have linked it 25 times, most often “I created a game to detect the browser history”. It is still writing: the last post was on 2026-03-23, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
Linked for a Google XSS technique, where a demo page asks the reader to click a button, and for a write-up of the Mozilla VPN CVE-2023-4104 flaw in Polkit authentication handling.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Welcome to my site.
Most-linked posts?
- I created a game to detect the browser history2 people · 2 mentions · first linked 2024-11-24
- Google has a secret browser hidden inside the settings2 people · 2 mentions · first linked 2023-06-26
What Hacker News says?
go here and click the button https://matan-h.com/common-google-xss?continue=javascript:al...
Comment linking /common-google-xss?continue=javascript:alert(document.domain%2B%22%20just%20got%20hacked%22)
on “Common Google XSS”Submitted Google has another secret browser as a story · 777 points
HN discussion> What a complete clusterfuck. It's unbelievable that in 2023, a company of Mozilla's stature appears to have no proper processes in place for handling serious security vulnerabilities even when they are being reported to them (for free!) by cooperative third parties. While I agree with your sentiment here, it's not exceptionnal at all and I've seen security researcher complaining about the same thing comming from a…
Comment linking /google-has-a-secret-browser-hidden-inside-the-settings/
on “Mozilla VPN: CVE-2023-4104: vpndaemon wrongly implements Polkit authentication”Submitted Common Google XSS as a story · 159 points
HN discussionSubmitted Google Has SSRF – Now as a story · 3 points
HN discussionSubmitted I Analyzed StackOverflow for Secrets as a story · 3 points
HN discussionSubmitted No Laptop, No Problem: Creating a Development Environment on Android as a story · 3 points
HN discussionSubmitted A "Boring" XSS Discovered in Google as a story · 2 points
HN discussionSubmitted Building an online media converter with a different approach as a story · 2 points
HN discussionSubmitted Google has a secret browser hidden inside the settings as a story · 2 points
HN discussionSubmitted Fixed Python Autocomplete as a story · 1 points
HN discussionSubmitted Falling History as a story · 1 points
HN discussionSubmitted I created a game to detect the browser history as a story · 1 points
HN discussionSubmitted New SSRF in Google as a story · 1 points
HN discussionSubmitted Show HN: Private-Convert: a Local media conversion site as a story · 1 points
HN discussionSubmitted Build a quick and private online converter as a story · 1 points
HN discussionSubmitted I Analyzed StackOverflow for Leaks as a story · 1 points
HN discussionSubmitted Visual Sitemaps: A New Type of Sitemap as a story · 1 points
HN discussionSubmitted In-the-browser local media conversion site powered by web assembly as a story · 1 points
HN discussionSubmitted Visual Sitemaps: Next-gen sitemap for sites as a story · 1 points
HN discussionSubmitted Show HN: Private-Convert: a WASM-based media conversion site as a story · 1 points
HN discussionSubmitted My guide on how to set up development environment in Android as a story · 1 points
HN discussionSubmitted Unusual WordPress 404 Page as a story · 1 points
HN discussionSubmitted One LFI bypass to rule them all (using PHP base64) as a story · 1 points
HN discussionSubmitted One LFI bypass to rule them all (using base64) as a story · 1 points
HN discussion