BSides Tallinn 2024

BSides Tallinn 2024

Web security is fun (or how I stole your Google Drive files)
2024-09-19 , Stage 1

This talk is about a vulnerability in Google Drive. But it's also a talk about web security concepts, how services can be made to interact in unintended ways, and how a few seemingly harmless flaws can be chained to defeat security boundaries.

See also:

I like to play around with the web and browsers for fun. Sometimes I find bugs. 7 CVEs in Chrome.
https://lyra.horse/blog/