{"guid":"import-c061c38bfc1a4656a5","title":"Attacking Rich Internet Applications","subtitle":"Not your mother's XSS bugs","slug":"25c3-2893-en-attacking_rich_internet_applications","link":"http://events.ccc.de/congress/2008/Fahrplan/events/2893.en.html","description":"This presentation will examine the largely underresearched topic of rich internet applications (RIAs) security in the hopes of illustrating how the complex interactions with their executing environment, and general bad security practices, can lead to exploitable applications.\n","original_language":"eng","persons":["Stefano Di Paola","kuza55"],"tags":["25c3"," Hacking"],"view_count":52,"promoted":false,"date":"2008-12-28T01:00:00.000+01:00","release_date":"2009-01-18T01:00:00.000+01:00","updated_at":"2025-11-20T20:15:04.980+01:00","length":3701,"duration":3701,"thumb_url":"https://static.media.ccc.de/media/congress/2008/25c3-2893-en-attacking_rich_internet_applications.jpg","poster_url":"https://static.media.ccc.de/media/congress/2008/25c3-2893-en-attacking_rich_internet_applications_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2008/import-c061c38bfc1a4656a5-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2008/import-c061c38bfc1a4656a5-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/25c3-2893-en-attacking_rich_internet_applications","url":"https://api.media.ccc.de/public/events/import-c061c38bfc1a4656a5","conference_title":"25C3: nothing to hide","conference_url":"https://api.media.ccc.de/public/conferences/25c3","related":[{"event_id":710,"event_guid":"import-996ee6767784dc2e88","weight":1},{"event_id":771,"event_guid":"import-4d16517d50ae0e0c3b","weight":1},{"event_id":796,"event_guid":"import-802e39aaed267dfb47","weight":1},{"event_id":797,"event_guid":"import-99180de8618aece534","weight":1},{"event_id":917,"event_guid":"import-2623e5399f12d9c994","weight":1},{"event_id":1028,"event_guid":"import-f46b9a6a2d546305c8","weight":1},{"event_id":1034,"event_guid":"import-475cf38d0e695ee755","weight":1},{"event_id":1262,"event_guid":"import-29c8513b5ebcac13d0","weight":1},{"event_id":1267,"event_guid":"import-ab5825f2382abe8af8","weight":1},{"event_id":1270,"event_guid":"import-b01de4e5ea4f6f641f","weight":1},{"event_id":1276,"event_guid":"import-2d0ce4e9cfeb6f9f7d","weight":1},{"event_id":1277,"event_guid":"import-46ee25357ca568906f","weight":1},{"event_id":1282,"event_guid":"import-45de35e744bc8f1d4c","weight":1},{"event_id":1286,"event_guid":"import-f6c40cb6e8f7feb70c","weight":1},{"event_id":1287,"event_guid":"import-555a982abc9d8b293e","weight":1},{"event_id":1290,"event_guid":"import-7fdd19a6d7f3fa79ff","weight":1},{"event_id":1295,"event_guid":"import-e764d19e33d6433269","weight":1},{"event_id":1299,"event_guid":"import-5fa5d5ff35316aaa6c","weight":1},{"event_id":1303,"event_guid":"import-8a69e7b1ee3f8cc625","weight":1},{"event_id":1305,"event_guid":"import-70fdf2e68b2b8c4ea2","weight":1},{"event_id":1309,"event_guid":"import-85069872c1089c4360","weight":2},{"event_id":1313,"event_guid":"import-ab7c839b128736450c","weight":1},{"event_id":1319,"event_guid":"import-8397d9a280bad60e5c","weight":1},{"event_id":1321,"event_guid":"import-0ec6cf83fd3d4ca115","weight":1},{"event_id":1323,"event_guid":"import-5e89fe5c21c6e4d891","weight":1},{"event_id":1331,"event_guid":"import-b6d9b9d565c00a5acb","weight":1},{"event_id":1334,"event_guid":"import-999159d42d326f39e3","weight":1},{"event_id":1339,"event_guid":"import-1750405b344a79e865","weight":2},{"event_id":1343,"event_guid":"import-dec7979f6876685173","weight":1},{"event_id":1346,"event_guid":"import-e9df7801eb432bf49e","weight":1},{"event_id":1347,"event_guid":"import-a7dc5a6ad09460f44a","weight":1},{"event_id":1350,"event_guid":"import-bbaef39cd440f712fd","weight":1},{"event_id":1373,"event_guid":"import-613c31891add515c96","weight":1},{"event_id":1389,"event_guid":"import-5e05e9fcc28e3e5161","weight":1},{"event_id":1422,"event_guid":"import-d7f37b1162046a6dc0","weight":1},{"event_id":1429,"event_guid":"import-491788383a692aaae6","weight":1},{"event_id":1433,"event_guid":"import-0d85220ad4a9ae8992","weight":1},{"event_id":1436,"event_guid":"import-b6cba2c62c6ac212a4","weight":1},{"event_id":1451,"event_guid":"import-383c676610cff2f149","weight":1},{"event_id":1454,"event_guid":"import-3299afbb3645f5d6ee","weight":1},{"event_id":1455,"event_guid":"import-524e41ae54d3230bb9","weight":1},{"event_id":1456,"event_guid":"import-ffedc66f28f81c9a2e","weight":1},{"event_id":1460,"event_guid":"import-973ed884893c6dffcd","weight":1},{"event_id":1461,"event_guid":"import-4703df2362d43a594d","weight":1},{"event_id":1469,"event_guid":"import-7cc5774ada31a7936e","weight":1},{"event_id":1474,"event_guid":"import-00d4d9403ecf738d65","weight":1},{"event_id":1476,"event_guid":"import-18ff532f1aae2ba415","weight":1},{"event_id":1477,"event_guid":"import-633bd84860f65db047","weight":1},{"event_id":1487,"event_guid":"import-31618b1a3c02facb8d","weight":1},{"event_id":1493,"event_guid":"import-e0153826abfc289658","weight":1},{"event_id":1501,"event_guid":"import-ff92b8bbffb2bdb1ac","weight":1},{"event_id":1503,"event_guid":"import-019cfe6488a1c1abe9","weight":1},{"event_id":1509,"event_guid":"import-31d801b8dfc62fa380","weight":1},{"event_id":1510,"event_guid":"import-5c41c1053cc25fb4b8","weight":1},{"event_id":1512,"event_guid":"import-79dd14a9f3d562f20e","weight":1},{"event_id":1516,"event_guid":"import-7a231e34c3be021873","weight":1},{"event_id":1518,"event_guid":"import-9730c46adda6b5864e","weight":1},{"event_id":1519,"event_guid":"import-7c24eae3ff97e72737","weight":1},{"event_id":1530,"event_guid":"import-6fdeaba494d8699165","weight":1},{"event_id":1755,"event_guid":"O-7g6jlu6DmenVdxO6t2Mg","weight":1},{"event_id":1987,"event_guid":"20EwnwJ17Oj0CmoP9_jZOA","weight":1},{"event_id":2072,"event_guid":"UDVlzdSAY3j9pKZBASJEOw","weight":1},{"event_id":2269,"event_guid":"C4w30id6HpMnzKM2xcrT4g","weight":1},{"event_id":2291,"event_guid":"2f68e356-6c3f-4034-9640-c06d717ed96b","weight":1},{"event_id":2811,"event_guid":"fa0727ab-81a7-4197-bc7d-0ce5e9dc4526","weight":1},{"event_id":2814,"event_guid":"3cb4101c-2042-4883-b6fb-6591994a70c0","weight":1},{"event_id":2995,"event_guid":"23135566-f6b9-4e08-b7a0-c7454a8e0b23","weight":1},{"event_id":3763,"event_guid":"8fbee7ff-b50c-4310-af9d-d44794669f25","weight":1},{"event_id":4323,"event_guid":"df804417-58b7-42fa-a626-83ed1663677f","weight":1},{"event_id":6557,"event_guid":"df01776d-607c-598e-917f-2ffd406c4330","weight":1}],"recordings":[{"size":473,"length":3701,"mime_type":"audio/ogg","language":"eng","filename":"25c3-2893-en-attacking_rich_internet_applications.ogg","state":"downloaded","folder":"audio_only","high_quality":true,"width":720,"height":576,"updated_at":"2014-05-10T15:26:45.411+02:00","recording_url":"https://cdn.media.ccc.de/congress/2008/audio_only/25c3-2893-en-attacking_rich_internet_applications.ogg","url":"https://api.media.ccc.de/public/recordings/2214","event_url":"https://api.media.ccc.de/public/events/import-c061c38bfc1a4656a5","conference_url":"https://api.media.ccc.de/public/conferences/25c3"},{"size":473,"length":3701,"mime_type":"video/mp4","language":"eng","filename":"25c3-2893-en-attacking_rich_internet_applications.mp4","state":"downloaded","folder":"video_h264_720x576","high_quality":true,"width":720,"height":576,"updated_at":"2016-01-27T11:03:31.613+01:00","recording_url":"https://cdn.media.ccc.de/congress/2008/video_h264_720x576/25c3-2893-en-attacking_rich_internet_applications.mp4","url":"https://api.media.ccc.de/public/recordings/2213","event_url":"https://api.media.ccc.de/public/events/import-c061c38bfc1a4656a5","conference_url":"https://api.media.ccc.de/public/conferences/25c3"},{"size":473,"length":3701,"mime_type":"video/webm","language":"eng","filename":"25c3-2893-en-attacking_rich_internet_applications.webm","state":"downloaded","folder":"webm","high_quality":true,"width":720,"height":576,"updated_at":"2016-01-27T11:03:31.642+01:00","recording_url":"https://cdn.media.ccc.de/congress/2008/webm/25c3-2893-en-attacking_rich_internet_applications.webm","url":"https://api.media.ccc.de/public/recordings/2212","event_url":"https://api.media.ccc.de/public/events/import-c061c38bfc1a4656a5","conference_url":"https://api.media.ccc.de/public/conferences/25c3"}]}