-
Notifications
You must be signed in to change notification settings - Fork 8
Open
Labels
Description
I think I just discovered a significant vulnerability with TorchNoteJS. All user entries end with a =.
This doesn't suggest that communications are not securely encrypted but rather this makes bot obfuscation irrelevant as a sophisticated attacker could ignore any line that doesn't end with a =.
Proposed solutions:
- Add a
=to the end of generated bot obfuscations. - Determine why ever user input ends with
=.
Reactions are currently unavailable