Satoshi

bitcoin

[Satoshi @SatoshiSeer_]

@afrijaldz My pleasure to help, cheers guys.

[Satoshi @SatoshiSeer_]

@IDRX @nael_idrx tolong diperbaikin lagi.

Sistem API kalian terlalu transparant, sesampainya data usernya ikutan ke distribusi “free entry”.
Traffic jaringan endpoint /api/proxy/auth/profile, agak lain ya.
Data profile lengkap, token JWT, KYC gak ada pertahanan.

[Satoshi @SatoshiSeer_]

@nael_idrx @idrx_co Okay that’s cool. Read this.

https://t.co/NQP1D9fxnh

Fix before too late, attackers can access without password just doin XSS network logging cookies for takeover.

[Satoshi @SatoshiSeer_]

@IDRX @nael_idrx tolong diperbaikin lagi.

Sistem API kalian terlalu transparant, sesampainya data usernya ikutan ke distribusi “free entry”.
Traffic jaringan endpoint /api/proxy/auth/profile, agak lain ya.
Data profile lengkap, token JWT, KYC gak ada pertahanan.

[Satoshi @SatoshiSeer_]

@yanzero_

[Satoshi @SatoshiSeer_]

Vulnerable to IDRX website.

1. Excessive data exposure & sensitive data exposure (CWE-200/OWASP API3).
2. Session Hijacking Risk via JWT Cookie (OWASP API2 - Broken Authentication).
3 Potensial IDOR.

No hard feelings just fix your backend before someone comes in.

[Satoshi @SatoshiSeer_]

@direkturcrypto https://t.co/480yIxEcHH sendiri sangat ketat mendeteksi cryptomining. Mereka punya sistem deteksi khusus pakai syscall analysis. Banyak miner sudah kena ban di sana.

How you bypass it ? It’s not simple.

[Satoshi @SatoshiSeer_]

@e100ss @grok it’s real ?

[Satoshi @SatoshiSeer_]

16 years of work Bitcoin.