New answers tagged

1

A session token of any kind, JWT included, is expected to be an opaque blob to the client. This is actually enforced for most tokens stored in cookies, where the HttpOnly flag means the client can't inspect the cookie. Even for bearer tokens, though, there's no need to inspect the token client-side. Indeed, I'd be suspicious of any system where any element ...


1

Try to get account takover or user data manipulation. This will be a very dangerous subject. Good form rules tell us not to be destructive. Just describe vulnerability to security team and list potential harm moments.


1

The most obvious inroad: The passthrough GPU has full access to main memory for DMA operations, mediated by the IOMMU, and to other PCIe devices in the same domain. The GPU can emit "translated" memory access requests that bypass the IOMMU translation (as the addresses used are already assumed to be translated), whether that is actually implemented ...


Top 50 recent answers are included