How to Take Over The Computer of Any Java (or Clojure or Scala) Developer

made by mveytsman, submitted by davidbalbert
In 2014, Max realized that packages from Maven Central weren't served over TLS. He built a proof of concept exploit that added cat pictures to any Java program that installed a package from the internet, and convinced Maven Central to support TLS.

How I was able to track the location of any Tinder user.

made by mveytsman, submitted by davidbalbert
In 2013, Max realized that you could use triangulation to discover the precise location of any user on Tinder. Max built a proof of concept and notified Tinder, and they fixed the vulnerability.