Moneysac

its running now for over an hour in my Pythin code base without any feedback…

its running now for over an hour in my Python code base without any feedback.

Interesting article. Did you try unblob as an alternative? It is capable of extracting multiple file formats including elf binaries.

could you explain how you do that exactly?

In a single page application it is necessary to access the JWT with JavaScript. Thats why it is so common to save it in the code directly or in the local storage. It is dangerous though, since a XSS vulnerability can be used to access the JWT. This would be totally different with a cookie that is stored with HttpOnly.

In a single page application you have to access the JWTs with JavaScript. When we use cookies to implement sessions we have attributes like HttpOnly to prevent the cookie from being referenced by JavaScript code. In this case a XSS vulnerability would not be able to simply access the cookie and take over another users session.

What I am trying to say here is that JWTs used in single page applications are dangerous because you have no layer of protection against XSS attacks.

Ross Ulbricht, the developer of Silk Road, is serving a double life sentence plus 40 years, without the possibility of parole. There is no doubt that it was illegal. However, a lot of people think that the sentence is overblown compared to other crimes. Sign the petition if you agree with that.