JWT
AssessTechniques
A token format used for identity and authorization data exchange.
Why it's here
Placed in Assess: 4 article(s) of evidence from 3 source(s), led by security coverage, with 1 in the last 30 days. Confidence 56%.
Evidence (4)
- 8Hacker News·9/20/2026securityOpenAI ad tracking on ChatGPT-linked browsing activity
A Hacker News post alleges that OpenAI's advertising collector can link ChatGPT users to activity on advertiser websites through a cookie and embedded tracking code. The report says the mechanism was reproduced and shows data from pages visited, including products, articles, and form-derived identity signals, being sent back to OpenAI.
- 7Cloudflare Blog·8/14/2026product_launchCloudflare adds one-click Access protection for Workers
Cloudflare introduced new controls that let customers apply Cloudflare Access directly to a single Worker or across all Workers in an account. The update makes Workers private by default, protects preview and production deployments behind company login, and exposes authenticated user identity data to application code.
- 9Hacker News·8/10/2026securitytl;dv Firestore exposure left meeting metadata publicly reachable
A Hacker News post alleges that tl;dv's Firestore database was left open, allowing authenticated users to query meeting records across tenants. The exposed data reportedly included creator emails, conference IDs, recording status, and timestamps, with live meeting IDs potentially enabling unauthorized joins to active calls.
- 6InfoQ·7/23/2026researchInk & Switch Releases Bijou64 for Canonical Integer Parsing
Ink & Switch published bijou64, a variable-length integer encoding in which each number has exactly one byte representation. The design targets canonicality bugs that have enabled attacks in areas such as PKCS#1, JWT libraries, and Bitcoin, and it reportedly decodes faster than LEB128. Community ports have already appeared in several languages, including Elixir, Go, Perl, and Java.