2 ms·
> I guess it means they stored their access tokens with no encryption Or the encryption key was on a system the hacker may have accessed.
by dangrossman 13y ago
> I guess it means they stored their access tokens with no encryption
Or the encryption key was on a system the hacker may have accessed.
- mpeg 13y agoYeah, same thing. I remember a large retailer I did some pentesting for a long time ago, they kept the encryption key for credit card numbers in the same table as the card numbers. Doh.