Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/NishantK/statuses/113878581801173595">Nishant Kaushik (nishantk@infosec.exchange)'s status on Friday, 24-Jan-2025 04:12:22 JST</a><a href="https://infosec.exchange/@NishantK" title="nishantk@infosec.exchange"><img src="https://gnusocial.jp/avatar/321275-48-20250123191222.webp" width="48" height="48" alt="Nishant Kaushik" style="position: absolute; left: 0; top: 0;">Nishant Kaushik</a></section><article><p>OMG! I'm dying!<br>"token validation looking kinda thicc"<br><a href="https://infosec.exchange/tags/Security" rel="tag">#Security</a> <a href="https://infosec.exchange/tags/CodeReviewsMatter" rel="tag">#CodeReviewsMatter</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4434455#notice-8676112">In conversation</a><time datetime="2025-01-24T04:12:22+09:00" title="Friday, 24-Jan-2025 04:12:22 JST">about 15 days ago</time> <span>from <span><a href="https://infosec.exchange/@NishantK/113878581801173595" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@NishantK/113878581801173595">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/3996713">Screenshot of a reddit post titled "My team's intern just found a critical bug by shitposting in our codebase"
Highlight is that a summer intern saved their entire authentication service by finding a critical bug because he thought the commit messages and comments were too boring, and starting reviewing the code in earnest to add memes to his.
As a result, he found a validation bypass bug in a legacy auth system that's been running since before TikTok existed and for which none of the original engineers are still around. He highlights it with the comment:
"yo why this token validation looking kinda thicc though
fr fr no cap this base64 decode bussin
wait... hold up... this ain't bussin at all"</a></label><br><a href="https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/878/557/823/153/650/original/e8aff42ceba636bc.png" rel="external">https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/878/557/823/153/650/original/e8aff42ceba636bc.png</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Nishant Kaushik (nishantk@infosec.exchange)'s status on Friday, 24-Jan-2025 04:12:22 JST Nishant Kaushik
OMG! I'm dying!
"token validation looking kinda thicc"
#Security #CodeReviewsMatter
In conversationabout 15 days ago from infosec.exchangepermalink
Attachments
1. Screenshot of a reddit post titled "My team's intern just found a critical bug by shitposting in our codebase" Highlight is that a summer intern saved their entire authentication service by finding a critical bug because he thought the commit messages and comments were too boring, and starting reviewing the code in earnest to add memes to his. As a result, he found a validation bypass bug in a legacy auth system that's been running since before TikTok existed and for which none of the original engineers are still around. He highlights it with the comment: "yo why this token validation looking kinda thicc though fr fr no cap this base64 decode bussin wait... hold up... this ain't bussin at all"
  https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/878/557/823/153/650/original/e8aff42ceba636bc.png

Public

Embed Notice

HTML Code

Corresponding Notice