jwtadvice

42 ms·

1. 331.▲
   by jwtadvice 10y ago

   The Congress will get every shred of legislation they can suck from the desperation of the Obama Administration to have it pass. No legislator wants to have their name on the bill before elections, especially without official support from t
2. 332.▲
   by jwtadvice 10y ago

   Many of the backdoors are written into the constants and constructions of the algorithms themselves in undiscoverable ways. Constants that embed groups inside of weaker groups, multivariate systems that under certain transformations leak ke
3. 333.▲
   by jwtadvice 10y ago

   Operation Aurora was motivated, at least in part, by US government spying on individual Chinese citizens. The US does seem to care about surveillance and spying on its population. In foreign policy and intelligence circles, surveillance of
4. 334.▲
   by jwtadvice 10y ago

   Agreed everywhere. Users tend to be looser with their id_tokens (for example posting on forums, stackexchange, etc) than with access_tokens because they understand the access_tokens are credentials whereas the id_tokens are (technically) no
5. 335.▲
   by jwtadvice 10y ago

   This is a pretty low bar on JWT advice. Here are some more: * Make sure that you use JSON.parse to handle incoming JWT bodies if you are writing custom JS code. Using any eval() derivative function opens up XSS * If you include any strings