introvertmac

8 ms·

31.
by introvertmac 6y ago
Great point!
32.
by introvertmac 6y ago
P.S. I've just complied few of recent findings from crypto websites. These issues are applicable to any website or REST APIs. This post is not about security vulnerabilities in blockchain, smart contract or crypto protocols.
33.
by introvertmac 6y ago
I genuinely tried to complied the issues and yes, most of them are crypto websites. Sorry for any confusion created by the title!
34.
by introvertmac 6y ago
Security disclosure and private work have some responsible disclosure policies. I've added added the public bug bounty website for the last one!
35.
by introvertmac 6y ago
You made a good point but accepting JS in a currency field requires validation + sanitization. Validate for functional errors then sanitize for injection issues. Hope it makes more sense now! Sorry for any confusion from previous comments
36.
by introvertmac 6y ago
Maybe I was not able to make it clear - what I meant was "if you can inject arbitrary code in disabled fields and the system is using those JSON data elsewhere, it can lead to injection attacks" The whole idea is validate the user
37.
by introvertmac 6y ago
That is basically injecting JS to trigger XSS (running user's code on the application)
38.
by introvertmac 6y ago
Mostly through XSS and combining other security issues
39.
by introvertmac 6y ago
There could be n numbers of ways to prevent this but saving user inputs without validation is always a bad idea.
40.
by introvertmac 6y ago
Yes, it is :P Saying sorry on behalf of whole 2020 :)
41.
Common security issues with crypto websites and APIs(introvertmac.wordpress.com)
90 points by introvertmac 6y ago|34 comments
42.
Why Your First House Is A Liability(medium.com)
30 points by introvertmac 6y ago|68 comments
43.
by introvertmac 7y ago
Thanks a lot! Where can I find it?
44.
Ask HN: What are best documentaries you have watched this year?
1 points by introvertmac 7y ago|5 comments
45.
by introvertmac 7y ago
China has the population and to some extent tech advantages but the Chinese government is very strict, unpredictable and favor individuals who are on their side. Not everyone has an equal opportunity to make it big in China. If you care abo
46.
by introvertmac 7y ago
Peter Thiel wrote about it back in 2014 in his book, Zero to One. We have a different image of China and China has done a great job posing as next superpower but the reality is very different on the ground. Rich Chinese want to get away fro
47.
by introvertmac 8y ago
Bug bounty literally changed my life. In 2013 Facebook paid me $5000, because of it I was able to pay my education loan(in India) and avoided all those compound interest. I started way before when it was popular and actually got my current
48.
Personal finance for millennials(medium.com)
1 points by introvertmac 8y ago|0 comments
49.
Ask HN: Is there any list of open source fellowship/support programs?
1 points by introvertmac 9y ago|0 comments
50.
Show HN: Terminal based minimal web application scanner built on Python(github.com)
1 points by introvertmac 9y ago|0 comments
51.
Udemy gets a makeover(udemy.com)
1 points by introvertmac 9y ago|0 comments
52.
Always “Swipe-right” script for Tinder(twitter.com)
3 points by introvertmac 9y ago|0 comments
53.
Breaking Instacart(introvertmac.wordpress.com)
1 points by introvertmac 9y ago|0 comments
54.
by introvertmac 9y ago
I came across this 'STOP words' https://en.wikipedia.org/wiki/Stop_words yesterday. Wiki says these word list can vary from services to services. There is hardly any chance you'll find a complete list, m
55.
Personal Finance 101: The core four principles(teneif.com)
1 points by introvertmac 9y ago|0 comments
56.
We need Bitcoin in the mainstream market(medium.com)
1 points by introvertmac 9y ago|0 comments
57.
Everything you need to know about why Bitcoin is required in mainstream market(teneif.com)
3 points by introvertmac 9y ago|0 comments
58.
Show HN: Easy Scan, a minimal web application security scanner(github.com)
1 points by introvertmac 9y ago|0 comments
59.
PHP security best practices(blog.synapsepay.com)
2 points by introvertmac 9y ago|0 comments
60.
Bitcoin has given more than 174% return in 1 year(quora.com)
1 points by introvertmac 9y ago|0 comments

More ›