Re:Slack was hacked
by rudolf0 on Monday March 30, 2015 @06:27PM
(#9293057)
I am well aware of that misuse, as I've exploited it during a CTF before. :)
I would consider using the raw byte-output version of a function a very blatant example of "improper implementation".
Also, I agree regarding encryption. In my example I was actually referring to the random AES key as a pepper, even though it'd probably be better called an "application secret".
I would consider using the raw byte-output version of a function a very blatant example of "improper implementation".
Also, I agree regarding encryption. In my example I was actually referring to the random AES key as a pepper, even though it'd probably be better called an "application secret".