The Most Annoying Website (aka "The Power of the Web Platform")

on YouTube ↗30m

" summary

Demos show concrete hacks: a site that fills hard drive via infinite subdomains (five MB per domain, once crashing Chrome around two GB), a Flash iframe webcam exploit, fullscreen phishing, and a livecoded page that spawns and moves/resizes windows, makes them bounce and chase your mouse, hijacks history/back, registers protocol handlers, auto-logs out accounts via GET requests, and abuses picture‑in‑picture. Code runs live and most demos work as shown, with surprising edge cases and browser heuristics exposed — watch if actual techniques and failures matter.

AI-written summary · about

" chapters (7)

1. 0:00Start
2. 0:56TAKING ADVANTAGE OF A GAP BETWEEN
3. 2:30FLASH SETTINGS MANAGER
4. 4:06EVERY DOMAIN CAN STORE 5 MB
5. 8:49MOVE A WINDOW AROUND
6. 9:34OPEN A NEW WINDOW
7. 10:11"USER INITIATED" EVENT HANDLER

" related talks

• 38mThe Most Annoying Website (aka "The Power of the Web Platform")Feross Aboukhadijeh · JavaScript fwdays'18
• 36mThe Most Annoying Website (Aka "the Power of the Web Platform")Feross Aboukhadijeh · JSConf US 2018
• 06mJavaScript PranksFeross Aboukhadijeh · JSConf.Asia 2018
• 59mBrowsers Gone WildXiaoran Wang, Angelo Prado · Black Hat Asia 2015
• 42mModern web application bugsErlend Oftedal · NDC Sydney 2018
• 40mHostile JavaScript: Attacking and Defending the BrowserTodd H. Gardner · NDC London 2023
• 33mHacking The Front-EndAlex Sexton · Full Stack Fest 2015
• 43mAttacking Modern Web TechnologiesFrans Rosén · OWASP AppSec Europe 2018