#session-cookies on Hacker News

2 stories tagged session-cookies, newest first.

Screenshot of simonkoeck.com: I Found a $90k Remote Code Execution Vulnerability in Google

I Found a $90k Remote Code Execution Vulnerability in Google (simonkoeck.com)

204 points by soeckly 14 days ago | 101 comments

A security writeup describing how a self-contained Flask session secret on Google DevSite enabled forged sessions and remote code execution across seven Google domains for a $90,000 bounty.

bug-bounty remote-code-execution google flask

Screenshot of gist.github.com: Stop Using JWTs

Stop Using JWTs (gist.github.com)

455 points by dzonga 4 months ago | 265 comments

A GitHub Gist arguing that JWTs should not be used for keeping users logged in and that regular cookie sessions are a better, more secure choice.

jwt authentication session-cookies web-security

#session-cookies on Hacker News

I Found a $90k Remote Code Execution Vulnerability in Google(simonkoeck.com)

Stop Using JWTs(gist.github.com)

I Found a $90k Remote Code Execution Vulnerability in Google (simonkoeck.com)

Stop Using JWTs (gist.github.com)