• 0 Posts
  • 119 Comments
Joined 2 years ago
cake
Cake day: July 26th, 2023

help-circle

  • TheKMAP@lemmynsfw.comtoNo Stupid Questions@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    2
    ·
    1 month ago

    If in the moment you’re replying to your own interpretation, you’re fine. But the second you overthink about their intentions, you will be freaking out, and that’s what the machine sees. One technique for bypassing lie detectors is to raise the baseline by flexing your butthole but there’s techniques to catch that, too.


















  • That password reset looked to be like step four of something. So it’s a business logic bypass. Still awful of course but slightly more understandable given other ways this vulnerability could have been introduced. The cool part was detecting all the steps completely blackbox because everything was in the Javascript.

    There is no excuse for issuing a valid token before mfa succeeds though. That is negligent.