1st July 2008 - Link Blog
Poking new holes with Flash Crossdomain Policy File. This is an old article from 2006 which describes the crossdomain.xml hidden in a GIF exploit I referred to in an earlier post (scroll down to the appendix for an example). As far as I know the Flash Player’s crossdomain.xml parser has been tightened up since.
Recent articles
- The Pelican comparison grid for Astra is pretty interesting - 4th September 2026
- OpenAI's rogue agents were caught communicating via public wikis - 4th September 2026
- Claude's new system prompt really doesn't want to reproduce song lyrics - 2nd September 2026