Posts

Facebook Comet Prelude: Anatomy of a Facebook Async Request: DTSG, LSD, jazoest, and getAsyncParams

Facebook's Custom URL Scheme Allowlist: A 150-Entry Attack Surface Inventory Inside Ghost Owl: Facebook's Anti-Tampering Immune System

"SIREN v3.0 — Four Gigabytes from Seventy-Eight Bytes: Precisely Weaponizing CVE-2026-32836 in dr_flac"

The Pipeline: Poisoning Every Stage of Scraper Ingestion

The Execution Frontier: Polyglots, WASM, and Python in the Browser