2 ms·
Fun fact, Hackernews itself was "hacked" by a user doing exactly this. A user realised they could successfully guess the key-space the server used to encrypt it
by moritonal 3y ago
Fun fact, Hackernews itself was "hacked" by a user doing exactly this. A user realised they could successfully guess the key-space the server used to encrypt it's user cookies. Had it had a greater source of random it wouldn't have been possible.
https://news.ycombinator.com/item?id=639976 https://news.ycombinator.com/item?id=639976
- jgrahamc 3y agoAmusingly, I had pointed out that HN was vulnerable to such an attack about a month before that user did it. And I was also involved into setting up Cloudflare's Lava Lamps. https://news.ycombinator.com/item?id=640213 https://news.ycombinator.com/item?id=640213