bresj
Re:Stealing private keys from a secure file sharing service
on Monday October 28, 2019 @10:54AM (#21377516)
Fixed as of now :-)
Re:Stealing private keys from a secure file sharing service
on Monday October 28, 2019 @06:19AM (#21375668)
(hi, I'm one of the creators)
Hopefully we fucked up nothing else but please do let us know if we did :-) We do sanitize all input but unfortunately this one slipped through.
Re:Stealing private keys from a secure file sharing service
on Monday October 28, 2019 @06:17AM (#21375658)
(disclaimer: I'm one of the creators of this very unnamed service)
The XSS-issue that was found by Tim was indeed a very fundamental problem which shouldn't have been in there. We are very happy he disclosed the information with us so we could fix it directly.
We hired a couple of professional hackers to audit our service but launched simultaneously. Biggest lesson for us: finish the audit first, launch afterwards :-)
Re:Stealing private keys from a secure file sharing service
on Monday October 28, 2019 @06:14AM (#21375639)
Which is highly appreciated ;-)
(one of the creators of SafeRequest says hi!)