Luke Young – Medium

Luke Young

Pinned

Luke Young
in
better appsec

Building a WebAuthn Click Farm — Are CAPTCHAs Obsolete?

How I built a click farm to “bypass” Cloudflare’s CAPTCHA killer with some cheap USB security keys, an Arduino, and a bit of python.

Jun 10, 2021

6 lite HyperFIDO keys connected to a USB hub and attached to a Raspberry Pi

Jun 10, 2021

Luke Young
in
bored.engineer

XSS on account.leagueoflegends.com via easyXDM [2016]

This post contains a chain of vulnerabilities I responsibly disclosed to Riot Games in November of 2016. I’m publicly disclosing it now as…

Dec 1, 2022

A browser alert box from ‘account.leagueoflegends.com’ indicating successful exploitation of the XSS issue

Dec 1, 2022

Luke Young
in
bored.engineer

DEF CON 25: Slides and Source Code

Aug 2, 2017

Aug 2, 2017

Luke Young
in
bored.engineer

DEF CON 24: Slides and Exploit

Here’s the slides and exploits from the DEF CON 24 talk in Las Vegas, NV. Video to follow in a few weeks.

Aug 6, 2016

Aug 6, 2016

Luke Young
in
bored.engineer

git init && git commit -a -m “Initial Commit”

I decided to relaunch my blog with my recent domain name change. It’s unlikely I will migrate the old content, but look forward to my…

Jul 22, 2016

Jul 22, 2016

Luke Young

Luke Young

I find bugs and exploit them. Sometimes for money, mainly for T-Shirts. https://www.linkedin.com/in/bored-engineer/

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams