4 ms·
How would one slice a byte array without magic numbers? Or without constants representing said magic numbers?
by pdntspa 4y ago
How would one slice a byte array without magic numbers? Or without constants representing said magic numbers?
- cyral 4y agoBy having an API that abstracts the details away, like any other browser API. I would expect something like attestationObject.getPublicKey() versus whatever is going on in that demo. I believe it was some part of oauth or saml (again not an expert here) where developers were making a common mistake by not verifying everything in the spec, leading to an easy bypass if you knew how it worked. Having devs implement a complex spec relating to authentication is a recipe for disaster.