Philosophy We strive to create an environment conducive to many different types of research across many different time scales and levels of risk. Learn more about our Philosophy Learn more

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert

Intro – Testing Google Sites and Google Caja In March 2018, I reported an XSS in Google Caja, a tool to securely embed arbitrary html/javascript in a webpage. In May 2018, after the XSS was fixed, I realised that Google Sites was using an unpatched version of Google Caja, so I looked if it was vulnerable to the XSS. However, the XSS wasn’t exploitable there. Google Caja parses html/javascript and

In 2014, a graduate student at the University of Waterloo, Canada, named Cohl Furey rented a car and drove six hours south to Pennsylvania State University, eager to talk to a physics professor there named Murat Günaydin. Furey had figured out how to build on a finding of Günaydin’s from 40 years earlier — a largely forgotten result that supported a powerful suspicion about fundamental physics and