Post

Robin Berjon
@robin.berjon.com

It's been almost ten hours since a meaningful security issue has been publicly reported in W Social's component that is used to check people's identity papers and it's still online.

opfuchs.gay@opfuchs.gay

Update it's pretty bad, even if just for reflected XSS If someone told me this were a credential harvester and not a supposedly real project that the european commission now runs on I'd believe them

32 reposts99 likes

Robin Berjon
@robin.berjon.com

Tu sais, je l'ai pensé très fort: à chaque fois que quelqu'un fait des promesses sur un système d'identité il y a une sécurité pourrie. Et voilà!