redactsure
Joined 1 year ago
Karma
6
Submissions
31
Member since
Apr 2
Recent submissions
Comment · 1 year ago
Comment · 1 year ago
Thanks! This is a good one. Looks like their dynamic content grabs it and places it there. It's definitely finicky.
It's gonna be a fun debug session. Timing/race conditions are always fun to debug!
Comment · 1 year ago
I have a new browser security method. Inside this link you'll have access to a virtual browser environment. In this environment you will have the ability to control and access a plain text private bitcoin key worth 20$. There is only a single key, first one to take it ends the challenge for all.
-> Demo Signup: https://app.redactsure.com -> Bitcoin Checker: https://redactsure.com/bitcoinchallenge -> Previous Winners: https://redactsure.com/leaderboard
Note: - No mobile, keyboard required - Requires you to verify an email - Any bug is eligible for a prize if it's something I haven't seen before, just tell me.
Some people were asking about implementation I'll provide a few details. - A server hosted browser - I manipulate what you are seeing on the webpage in real time - While I don't change the underlying webpage I do manipulate your actions to the webpage - A transformer model runs in real time along side you (tries to find all sensitive words you see)
Overall the system's goals are to allow you to perform work without ever seeing the data. It's in a early prototype stage and I expect a large numbers of edge cases just from the nature of the problem. The bitcoin is a proxy to the real goal which is protecting real PII in remote work settings.
It would be nice if you tell me the bug. I would like to post how you broke it.
Comment · 1 year ago
Ahhh, this is fun. My own security policy working against me! back to top of the leaderboard for you!
Comment · 1 year ago
Challenge is back up if anyone is still interested in a try:
https://redactsure.com/bitcoinchallenge/
Comment · 1 year ago
Up...again
Comment · 1 year ago
bet you couldn't do it again. It's back up. Patch is a bit hacky but should work plus I blocked the signup page.
Real patch is a chromium update (like a week of work) so imma avoid that until needed.
Comment · 1 year ago
that was brutal! I knew you were holding out something. Oh man this is a brutal bug as well. That's an OS popup! That's gonna take me some time.
Actually even worse it's neither an OS level or dom level item custom chrome rendering layer.
Comment · 1 year ago
back up if you want another chance
Comment · 1 year ago
back up if you want another go -> again
Comment · 1 year ago
Back up if you want another go.
Note: - No mobile, keyboard required - Requires you to verify an email - Any bug is eligible for a prize if it's something I haven't seen before, just tell me.
Some people were asking about implementation I'll provide a few details. - A server hosted browser - I manipulate what you are seeing on the webpage in real time - While I don't change the underlying webpage I do manipulate your actions to the webpage - A transformer model runs in real time along side you (tries to find all sensitive words you see)
Overall the system's goals are to allow you to perform work without ever seeing the data. It's in a early prototype stage and I expect a large numbers of edge cases just from the nature of the problem. The bitcoin is a proxy to the real goal which is protecting real PII in remote work settings.
It would be nice if you tell me the bug. I would like to post how you broke it.