3 ms·
due to the recent FIFA hack - just a reminder - stop using JWTs
by dzonga 4mo ago
due to the recent FIFA hack - just a reminder - stop using JWTs
- dgrin91 4mo agoThe Fifa hack had nothing to do with JWTs, it was because FIFA was doing auth on the client side. They would have had the same issue if they used cookie auth.
- mycall 4mo agoh4ckernews also accessed an Azure Function App that provided direct download URLs for internal FIFA files, including transfer reports and board level data, due to a lack of RBAC access checks.
- efilife 4mo agowhat the hell do you mean they were doing auth client side? how is this possible with infinite budget?
- tancop 4mo agoif you are fifa please keep using them in the most insecure way possible. release the infantino files