Canary Token Detection

There's like a lun check algorithm, or it's an actual credit card that can get passed. This is kind of fun, especially if you've got a big environment to put some canary tokens around and then see how soon until it gets used. I'd be willing to bet that what they've done is they've set up a singular card brand merchant account where you can do testing. It would not surprise me if that is true that a bunch of attackers would realize that pretty quickly.

Play episode from 56:28

Transcript

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app