News for hackers. Stuff that matters.

A comment on Microsoft government email compromised (and quietly fixed). Parent comment

Re:Microsoft government email compromised (and quietly fixed) by hermanb on Wednesday July 12, 2023 @04:27PM (#36701159)
It would be pretty interesting if they shared some more detail on this indeed. I was wondering the same when I read “forged” elsewhere.

How can you forge a token? Did they use quantum machinery to retrieve a JWT Private Key? Did they factor RSA keys?

But no, they used a bug/weakness to exchange a token.

[ Parent | on HN ]

There are no comments on this comment yet.