@lorenzolfm - gera um CSPRNG ~256 bits de entropia..
- mostra uma ÚNICA vez p/ o user..
- armazena no db só um hash, ñ criptografado, só hash mesmo... e também um prefixo/últimos 4 chars em plaintext só pra identificar na UI.. done.
perdeu? já era.. gera outro.
@0xPira Correto! Esse sempre foi o motor dessa comunidade. Infelizmente a nova geração desconhece, porque comercializar/privar conhecimento virou regra entre esses coaches nos últimos anos. Sempre bom lembrar dos fundamentos:
https://t.co/bcJBL7QtIG
@UK_Daniel_Card I remember that in 2016, @elie conducted a study specifically on this and achieved very interesting results. USB attack vectors haven’t changed much; a new study would be interesting.
Talk: https://t.co/ldwt90ABpS
More: https://t.co/FMp1f7JGCj
@fniephaus@garethheyes Ah, thanks, Fabio, now it makes sense. I'll try the downgrade, but I'm not sure if that might break some Burp/exts functionalities in the future. I ended up resolving it by converting to Python, so Graal isn't needed.
@garethheyes I tried several versions of JVM+Graal, and apparently, polyglot embedding is quite tricky to install now. So, I found a better solution: https://t.co/62WqKl5G5C