Thai student earns thank-you letter from NASA for reporting security hole

Thanapon Butsricha, a student at the university’s College of Computing, found a cross-site scripting (XSS) vulnerability, a flaw that could let attackers insert malicious script code into web pages, I understand reported. Working under the online pseudonym “nullbyt3z,” he reported it through NASA’s security team under the agency’s vulnerability disclosure policy. Under the practice, known … Read more