-
- login in flutter. Reliability. (Obsidian)
- optimize how the notes are pulled
- (For example. if they go into settings click "Force Sync") (maybe only make it clickable every 5 seconds)
- this …
-
This was originally reported to ZAP via BugCrowd.
We rated it as a LOW vulnerability and gave the reporter permission to disclose it, which they have done as [CVE-2022-27820](https://nvd.nist.gov/v…
-
### What would you like to be added?
/kind enhancement
## What
WP brute force often comes as repeated `200` requests to `xmlrpc.php`. The current `http-bf-wordpress_bf` does not catch this.
##…
-
Steps to reproduce:
1. Start a fresh instance of Dingo.
2. Create a new user (so the user ID `1` exists)
3. In `app/model/token.go`, change the `NewToken` function so it uses a set time (this is just …
-
Would it make sense to add DDPRateLimiter to validated-method?
-
- [x] Setup basic passphrase based authentication when sending pastes over HTTPS
- [x] Consider using HTTP headers for passing the passphrase, `X-Auth-Passphrase`
- [x] Use environment variables, do…
-
Summary:
- The order in which 2FA and user/password credentials are validated seems incorrect and provides an attacker more insight than what they should be privy to. Server response to a success…
-
We don't just need collision resistance, we also need pseudorandomness (i.e. suitability of the output as a Jubjub private scalar).
daira updated
11 months ago
-
Some ideas:
- IP **blacklist** (...also showing IPs that are currently blocked with a countdown)
- Edit the **time** an IP is blocked
- Edit the **attempts** a user can do without being blocked
…
-
Setup Linux distro on PC