18min chapter

Critical Thinking - Bug Bounty Podcast cover image

Episode 97: Bcrypt Hash Input Truncation & Mobile Device Threat Modeling

Critical Thinking - Bug Bounty Podcast

CHAPTER

Vulnerabilities in Bcrypt and Mobile Security

This chapter explores a critical vulnerability in bcrypt related to username input truncation, impacting multi-factor authentication security. It discusses the transition from bcrypt to PBKDF2 as a response to identified flaws and reflects on historical security issues. Additionally, the chapter highlights mobile security vulnerabilities, particularly regarding intent URLs and inter-app communication risks, emphasizing the ongoing challenges of threat modeling in mobile environments.

00:00

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode