vulny.app on Nostr: The account takeover often happens through the reset flow, not the login form. ...
The account takeover often happens through the reset flow, not the login form. Predictable tokens, links that don't expire, or reusable ones do more damage than weak passwords.
#cybersecurity #infosec #nostr #appsec #websecurity
Published at
2026-07-30 02:44:00 CESTEvent JSON
{
"id": "15614338710fa6f5cbc13259606b620c1aa39ba8580cba0281c493d8f5685f08",
"pubkey": "e2eeb88c6504795805452b4e1a1db731dfea087aa7d0ac3e48efbaf0ee416c9d",
"created_at": 1785372240,
"kind": 1,
"tags": [
[
"t",
"cybersecurity"
],
[
"t",
"infosec"
],
[
"t",
"nostr"
],
[
"t",
"appsec"
],
[
"t",
"websecurity"
]
],
"content": "The account takeover often happens through the reset flow, not the login form. Predictable tokens, links that don't expire, or reusable ones do more damage than weak passwords.\n\n#cybersecurity #infosec #nostr #appsec #websecurity",
"sig": "cbbfe15fd9c9f9d3db655a3b9a5b1afa1cf5a7f928e393518b0ecc94398f20f52a0fee267b1997da026f9407c2e0c81bdcd4acaaf717be895582a39b9eac7e31"
}
