3 ms·
Length-extension attacks are still a thing
- ktpsns 1y agoSo this another tale of not rolling your own crypto. The blog post does a great job in not to sound arrogant and state a clear way out: > Using HMAC or a modern hash/MAC function is the proper fix. For systems like BunnyCDN, adding a parameter such as ~ at the end of the query string provides a quick mitigation.