The Curious Engineer

All blogs / Security

Jesse Li

blog.jse.li

Jesse Li's blog

SecurityReverse engineeringJavaScript / TypeScript

’18’19’20’21’22’23’24’25’26
Posts
22 from 15 Jan 2018 to 30 Aug 2026
Posting
now and then (2 in the last year)
Kind
personal blog
Feed
https://blog.jse.li/index.xml

2026 2

  1. Resurrecting an old hack to build UI in GitHub READMEs
  2. Estimating the heights of New Yorkers from their scuff marks

2025 2

  1. Approve merge requests with your eyes closed
  2. Monitor Your Company's Stock Price on Grafana

2021 2

  1. Breaking electron-store's encryption
  2. Ten seconds to ponder if a thread is worth it

2020 6

  1. The Chrome T-Rex game, except the dinosaur is you
  2. My brother’s hamster
  3. Where Did Software Go Wrong?
  4. Finding secrets by decompiling Python bytecode in public repositories
  5. Open and Shut
  6. Building a BitTorrent client from the ground up in Go

2019 3

  1. You're still not anonymous on Looped
  2. You're not anonymous on Looped
  3. Detecting incognito mode in Chrome 76 with a timing attack

2018 7

  1. Reversing JS Malware From marveloptics.com
  2. An Analysis of Cloudflare's Email Address Obfuscation
  3. Hacking Harvard (and nearly every other college)
  4. Snow Day Calculator XSS
  5. Stored XSS in Schoology
  6. Uncovering a Bug in Cloudflare's Minification Service
  7. Bypassing Cert Pinning in the Steam Mobile App