"Security hole" is a loud title. Is it worth a blog post at all? meh

joshfraser · on June 9, 2014

I'm a big fan of your research. I debated whether to go with a more specific title like "Clickjacking with one click purchases on Amazon" but decided to keep it simple for people unfamiliar with the concept.

homakov · on June 13, 2014

In fact it is a security issue but IMO you also should have emphasized: 1) amazon sucks at fixing bugs 2) clickjacking can be a serious issue