Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Nishant Kaushik (nishantk@infosec.exchange)'s status on Friday, 24-Jan-2025 04:12:22 JST Nishant Kaushik

OMG! I'm dying!
"token validation looking kinda thicc"
#Security #CodeReviewsMatter
In conversation about 8 days ago from infosec.exchange permalink
Attachments
1. Screenshot of a reddit post titled "My team's intern just found a critical bug by shitposting in our codebase" Highlight is that a summer intern saved their entire authentication service by finding a critical bug because he thought the commit messages and comments were too boring, and starting reviewing the code in earnest to add memes to his. As a result, he found a validation bypass bug in a legacy auth system that's been running since before TikTok existed and for which none of the original engineers are still around. He highlights it with the comment: "yo why this token validation looking kinda thicc though fr fr no cap this base64 decode bussin wait... hold up... this ain't bussin at all"
  https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/878/557/823/153/650/original/e8aff42ceba636bc.png
- feld likes this.

Feeds