JWT
AssessTechniques
A token format used for identity and authorization data exchange.
Why it's here
Placed in Assess: 2 article(s) of evidence from 2 source(s), led by research-stage coverage, with 2 in the last 30 days. Confidence 39%.
Evidence (2)
- 9Hacker News·8/10/2026securitytl;dv Firestore exposure left meeting metadata publicly reachable
A Hacker News post alleges that tl;dv's Firestore database was left open, allowing authenticated users to query meeting records across tenants. The exposed data reportedly included creator emails, conference IDs, recording status, and timestamps, with live meeting IDs potentially enabling unauthorized joins to active calls.
- 6InfoQ·7/23/2026researchInk & Switch Releases Bijou64 for Canonical Integer Parsing
Ink & Switch published bijou64, a variable-length integer encoding in which each number has exactly one byte representation. The design targets canonicality bugs that have enabled attacks in areas such as PKCS#1, JWT libraries, and Bitcoin, and it reportedly decodes faster than LEB128. Community ports have already appeared in several languages, including Elixir, Go, Perl, and Java.