Posted by Doug Huff on Jun 20
In light of recent events in the "bitcoin community" I have decided that private disclosure of issues is doing nothing
but making them more prevalent.
In light of this decision I would like to report multiple CSRF vulnerabilities in http://clearcoin.appspot.com .
This set of CSRFs are particularly nasty since this is hosted on appspot and uses google account auth. So long as you
stay logged into your google account you are…
Source: Bitcoin fun day!