the gist of the vulnerability was an expectation that nobody would ever find their origins if they had some crazy hostname: "asuhdfo8a7ys8dfas.website.com" type of setup. In front of this origin they had a server that…
Posting under an alternative account for obvious reasons. Bad API's used in IoT are a huge vector for attack and too few companies in the mobile first world have a bug bounty program. I found a similar problem with an…
the gist of the vulnerability was an expectation that nobody would ever find their origins if they had some crazy hostname: "asuhdfo8a7ys8dfas.website.com" type of setup. In front of this origin they had a server that…
Posting under an alternative account for obvious reasons. Bad API's used in IoT are a huge vector for attack and too few companies in the mobile first world have a bug bounty program. I found a similar problem with an…