Submissions by mandatory

Chaining Together Lambdas: Exploring Different Ways to Link Serverless Functions

The Traveling Pokemaster – Hacking Pokemon Go with a Routing Algorithm

Jumping the Rabbit Hole – Beating WebApp Obfuscation with Request Interception

tarnish – The Chrome Extension Analyzer

FindThatMeme – Meme Search Engine Using Machine Vision for Indexing

Don't Do This (Postgres Wiki)

Video Downloader Extension Hijack Exploit – UXSS via CSP Bypass (~16 Mil Users)

Show HN: Teamflix, a service to watch Netflix/YouTube/more with friends online

Kicking the Rims – A Guide for Securely Writing and Auditing Chrome Extensions

Reading Your Emails with a Read&Write Chrome Extension SOP Bypass (~8M Affected)

ZenMate VPN Extension Deanonymization and Hijacking Exploit (3.5M Affected)

Accidentally Finding RCE in Signal Desktop via HTML Injection in Quoted Replies

So you want to be a security engineer?

The Indictment Against MalwareTechBlog (WannaCry "Hero")

Russian DNS Leak (All .ru, .su, .tatar, .рф, and .дети Domains)

The Journey to Hijacking a Country's DNS – The Hidden Risks of Domain Extensions

Hacking Guatemala’s DNS – Spying on Active Directory Users via a TLD Misconfig

TLDR Beta – View DNS Zone Data Dumps for Countries and Other TLDs