<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>z3rco — Blog</title><description>Junior security researcher and source code auditor. I read code to find the bugs scanners miss — IDOR, CSRF, auth bypasses, GraphQL exploits.</description><link>https://z3rco.me</link><language>en</language><atom:link href="https://z3rco.me/rss.xml" rel="self" type="application/rss+xml"/><item><title>I Bypassed Firefox&apos;s Battery API Block Using CPU Timing</title><link>https://z3rco.me/blog/firefox-battery-api-bypass</link><guid isPermaLink="true">https://z3rco.me/blog/firefox-battery-api-bypass</guid><description>Firefox removed the Battery API for privacy. I found a way to infer battery state anyway — using nothing but JavaScript timing measurements.</description><pubDate>Sun, 05 Apr 2026 00:00:00 GMT</pubDate><category>research</category><category>side-channel</category><category>firefox</category><category>privacy</category><category>fingerprinting</category><author>z3r0.dayz0101@gmail.com (z3rco)</author></item></channel></rss>