2 ms·
I might slightly amend that to the less illegal "use the flaws to submit bugs to their bounty programs and get paid for your time".
by Godel_unicode 5y ago
I might slightly amend that to the less illegal "use the flaws to submit bugs to their bounty programs and get paid for your time".
- ori_b 5y agoYou mean, like this? https://bhavukjain.com/blog/2020/05/30/zeroday-signin-with-apple/ https://bhavukjain.com/blog/2020/05/30/zeroday-signin-with-a... It's certainly possible to use JWT correctly, and with sufficient resources put towards auditing, most flaws will be caught. This doesn't make it a good design.