I'm a Web developer and IT security researcher. I'm been actively finding vulnerabilities and i released a bunch of advisories with whitehat and fulldisclosure philosofy in mind.

Here a short list of my finding : Persistent XSS in wordpress.com dashboard, XSS and CSRF in statcounter.com, CSRF on *.tumblr.com XSS and CSRF on cPanel, Critical XSS and CSRF in Memova Framework, XSS on twitter.com

In the spare times I'm doing photography and digital video.

• LinkedInlinkedin.com/matteocarli
• Twittertwitter.com/mcarli
• Flickrflickr.com/matteocarli