eMudhra Login Bypass(mastodon.catgirl.cloud)

5 points by _ache_ 3 days ago | 1 comments

Against the UUID(github.com)

3 points by firasd 1 year ago | 4 comments

Microsoft's official Minesweeper app has ads, pay-to-win, and is hundreds of MBs(tech.lgbt)

255 points by kibwen 2 years ago | 134 comments

A complete bypass of eMudhra’s 1FA OTP login system(mastodon.catgirl.cloud)

131 points by tensegrist 4 days ago | 53 comments

Mastodon thread describing a bypass of eMudhra's OTP login by encrypting OTP requests with an exposed public key, enabling brute-forcing of logins to steal certificates.

Skiff – Privacy-first end-to-end encrypted email(skiff.com)

176 points by throwoutway 3 years ago | 132 comments

Potential third critical PHP CVE(elk.zone)

50 points by mpaepper 5 days ago | 17 comments

A Mastodon thread by security researcher Elise describing a newly found PHP double-free vulnerability affecting 8.4 and 8.5, reported to [email protected] with details withheld.