This is my personal blog, I write about interesting things that come to mind. Socials below.

DOM-Based XSS on YouTube Services Directory
A detailed walkthrough on how I chained two different tricks (iframe srcdoc and a CSP bypass) to achieve XSS. Then an explanation of how Google patched the vulnerable code.

Don't Shoot Humanity In The Foot By Writing With AI
Creative writing is on life support because of AI misuse.

Unicode XOR Magic? Steganography with Arabic Diacritics
What magic happens when you XOR two Arabic letters together? English!