- Wed 26 June 2013
- Bitbucket: User Information Disclosure via JSONP
- Sun 23 June 2013
- Code Execution via YAML in JS-YAML Node.js Module
- Tue 04 June 2013
- CSRF Token Disclosure in Coinbase
My name is Neal Poole. I'm interested in web application security. I'm a Security Engineer on the Product Security team at Facebook. My posts are my own and do not necessarily reflect the views and opinions of my employer.