lexi <img src=x onerror=alert(1)> (@1lexxi) header
lexi <img src=x onerror=alert(1)> (@1lexxi) profile picture

not around here anymore lol. previous statements may not represent me correctly anymore

it/its | she/her
Joined November 2018
Photo by lexi <img src=x onerror=alert(1)> (@1lexxi)Photo by lexi <img src=x onerror=alert(1)> (@1lexxi)Photo by lexi <img src=x onerror=alert(1)> (@1lexxi)Photo by lexi <img src=x onerror=alert(1)> (@1lexxi)Photo by lexi <img src=x onerror=alert(1)> (@1lexxi)Photo by lexi <img src=x onerror=alert(1)> (@1lexxi)Photo by lexi <img src=x onerror=alert(1)> (@1lexxi)Photo by lexi <img src=x onerror=alert(1)> (@1lexxi)Photo by lexi <img src=x onerror=alert(1)> (@1lexxi)Photo by lexi <img src=x onerror=alert(1)> (@1lexxi)
stop scrolling through my security work, look at my sick ass cs clips instead
1
12
362
"i hacked emudhra" BORING. WHO CARES "i did the cleanest noscope ever" COOL AS FUCK
65
hi @starlabs_sg! first, congrats on the shell on issues.chromium.org/issues/5…! heartbreaking news: google likely wont pay you the fullchain bonus that you're hoping for :( we're in the same boat: pvr upstream known but unpatched bug w/ angle bypass. they dont wanna pay for that 1/2
reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|
3
3
55
6,582
if you wanna take a look at how my chain like that worked: issues.chromium.org/issues/5… also, as the thread says, this is not explicitly stated in the rules but they still refuse to pay out. if you wanna get in contact to try to do something about this feel free to dm though! 2/2
1
15
640
lexi <img src=x onerror=alert(1)> retweeted
Illinois Senate: Kirk (R), Giannoulias (D) Still Neck-and-Neck... www.rasmussenreports.com/illinois
6
1
lexi <img src=x onerror=alert(1)> retweeted
Kirk Street Suspect: ESCAMBIA - He was shot in the neck while trying to protect his home now deputies say th... http://tinyurl.com/3ytggdc
lexi <img src=x onerror=alert(1)> retweeted
Replying to @cubsncards
@cubsncards @BullsBlogger LOL! I didn’t even notice Hinrich! Watch that neck, Kirk!
1
1
lexi <img src=x onerror=alert(1)> retweeted
when you ask a google engineer to fix a bug and then genuinely hit you with the “i got this job by doing 500 leetcode problems” stare
8
45
3
2,809
87,906
more likes than dollars from google #WhitehatMoment #GotPaidInExposure #WhyDoIEvenBother
reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|
3
4
106
2,296
reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|
91
166
31
3,005
273,026
update: appealed the decision and they denied it because of this "rule". "Demonstrations of exploits against an active release of a Stable or Beta build of Chrome" is what it says in the rules at bughunters.google.com/about/…. nothing about everything being new. they just made that up
3
4
346
13,152
with the same argument they could deny any submission that uses known gadgets. next up they're gonna ban calling `system()` because they were already aware that `system()` can lead to RCE? this is a ridiculous rule that is not even documented anywhere. just insulting.
5
3
384
11,218
im also friends with satoshi nakamoto btw #bitcoin
2
7
1,133
i love spreading misinformation on the internet
6
997