varun.ch

Web developer and cybersecurity researcher

Web developer and cybersecurity researcher

My future alma mater is one of the best engineering schools in Canada (and in the world). But, you definitely wouldn't think that by looking at the course selection webpage, course search page or student information system 1 . source type="image/webp" src

This is the story of our three year long journey to turn a fleet of laptops into what can only be described as the world's most unhinged video wall. This project was a collaboration with my friend Aksel Salmi . I was responsible for the software, and he d

Typically, the highest impact of an XSS vulnerability on the web is gaining access to a victim's account on the vulnerable website (either through a session token or by performing actions on their behalf while your code is running). If you're particularly

This article is outdated! Firefox now ships a sidebar natively, and honestly, that alone is probably good enough for 99% of use cases. Mozilla says that Firefox will be shipping better profile management and vertical tabs sometime soon. Until then, this b

I can't believe this isn't the default. On MacOS Sonoma onwards, under 'System Settings' in 'Keyboard', turn on 'Keyboard navigation'. This grants you the privilege of using Tab and Shift Tab to select options in popup menus. img loading="lazy" decoding="

zsh was slow. A shell should not take nearly a full second to start. 814 milliseconds may not sound like a lot, but it's extremely noticeable, especially when creating new terminal tabs or sshing into a server. Time how long it takes for zsh to start: tim

In 2023, I discovered a critical vulnerability in the Breakthrough Challenge website. After over one year since it was patched, I am disclosing the bug for transparency. I believe this class of vulnerability, which I am introducing as 'Session Confusion',

Ten years after its sudden disappearance, Flappy Bird is making a comeback - but something about this revival doesn't quite add up.