Today's anonymous submitter shares with us the function their company uses to validate authentication tokens. public bool IsTokenValid(string token) { //TODO return true; } This is running in production. So that's fun. The user they've authenticated as is tracked separately at the start of their session, which makes it at least marginally harder... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
CodeSOD: Very Valid Tokens
Today's anonymous submitter shares with us the function their company uses to validate authentication tokens. public bool IsTokenValid(string token) { //TODO…