No Dave, we won't forget you so easily. I've been thinking about you all the week. Thanks for being such a generous person. Thanks for lightning up my passion for browser-security, which ended up turning out to be my lifetime career! GRACIAS DAVE! 😉

Haha =) It's on the blog-post!

Great, so I didn't even steal it properly. I skipped the guy who actually found it first 🤦‍♂️😂

But based on what I'm posting, it seems as if I read your research and took it as mine!! 🤣🤣🤣🤣 BTW, this thing is really useful to me, not because of the CSP but the fact that we can pass data bypassing what automated frameworks (bots) can easily see.

At 52 I'm still figuring it out, so you might want to pick a faster role model 😄

Thanks, Siunam! I've updated the public post reflecting my sad reality 😄😄 brokenbrowser.com/blog/2026-…

Hey Alex!!!! 😁 Same here! I had to double check it was me posting. Took me so long that by now someone else probably found the bug, reported it, got the bounty, AND spent it. But here I am, fashionably late to my own comeback. 😅

Wow!! Congrats, soutag and thanks siunam for the pointer! It seems I stumbled upon the same but a few years after haha =) Please, send me the link to the tweet to I can add proper credits to the blogpost! 😀

Haha this made my day, Jun! 😄 You were breaking browsers since 2015? And still at it. Glad the nostalgia hits! Means a lot coming from you. xitter.cf/magicmac2000/status/80… cracking.com.ar/poc/junspoof…

Thanks Rebane! ☺️ My publishing schedule is basically: one kid has a girlfriend (RIP my existence), the other ignores me on weekends. Half a Saturday is all I need. 🤣

For Chrome/FF/Safari, nope. If you want to get examples of this on IE/Edge, you can check in the UXSS area where you will find many variations and several using javascript: and data: brokenbrowser.com/browser-wo… What are you trying to achieve, exactly?

Striking similarities! =) It seems as if I've copied from that blog, but I haven't seen it. I've tested the prerender as described in the blog-post but it didn't work. So, apparently the snippet that you are sending has been patched, but they forgot to do it on prerender 🤣

Thanks, Thomas =) It's a bit of pure luck, really. I was trying to find a stealth extension detector and stumble upon this beauty in the middle of the research 🤣

Thanks, Garetho! You know you and Dave were big inspirations for me. Thanks for always being so generous with your knowledge and helpful with me! ☺️

Thank you, Paulos! 😄 After years of being the most important person in my kids' lives, I have now been officially downgraded to "that guy who still lives here." On the bright side, all that free time had to go somewhere. So here I am! 😄🤣

[ Chromium ] Stealth request that bypasses CSP, hides from DevTools, and leaks the real User-Agent (in case you faked it 😁) brokenbrowser.com/blog/2026-…

Like these ones youtu.be/GemH59jhj9k?list=PL… Cheers man! Looking forward to your next cracktros!

Outstanding, AWESOME cracktro, @PiotrBania ! Thanks for that. The only missing thing are the de-crunching colors moving all around just before the intro starts, ala power-packer or tetra-cruncher! 😆😆😆😆 Congrats, man!

The work that you do is wonderful. Simply awesome. If I had to start all over again, my first step would be to begin with your tutorials. Congrats and my best wishes with the patreon!

Hey Nick! Thanks for your books and thoughts. I learned a lot from you. Now I need to put these things in action 😆😆😆. QQ: when you say that MaxDD is -5.1%, are you measuring every day or end of month? If end of month, do you have a measurement of MaxDD intraday? Thanks!