Researchers Demonstrate Complete Bypass of eMudhra's Single-Factor OTP Login

·2 views

A security researcher has publicly disclosed a method that fully bypasses the one-factor OTP login system used by eMudhra, according to a post shared on Mastodon. The details were posted to Hacker News, where the disclosure drew 56 points and 10 comments from readers. The available source material is a link and discussion metadata, so the exact technical mechanism and scope of the flaw are not described here. eMudhra, a digital signature and identity services provider, has not been confirmed in the source as having responded to the disclosure.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Storing User Documents: Database Blobs Versus Object Storage for Large Files

For most SaaS document uploads, the recommended approach is to keep file bytes in object storage while saving searchable metadata in a relational database like Postgres or MySQL. This separation tends to scale more cheaply and keeps the database smaller and faster, with a clearer audit trail. Large files such as scanned contracts can turn a database-blob design into a backup and replication burden. The article suggests the database row act as the source of truth, storing ownership, status, checksum, and an object key, and it advises using unique keys per upload so originals are never silently overwritten. It also compares options including Postgres bytea, Amazon S3, Cloudflare R2, and MinIO, noting that Postgres can still suit small, tightly coupled files.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Hammock condenses WhatsApp group chats into two lines using an in-browser Gemma model

Hammock is an open-source tool that turns an exported WhatsApp group chat into a short digest: what happened, and what needs the user's attention. Code first filters out noise such as greetings, forwards, stickers, and deleted messages, and keeps only messages after the user's last reply that mention their name or nickname. Gemma, a small language model, then writes the summary and phrases each item needing action as a to-do, with one-tap reply drafts. Everything runs inside the browser with no server or account, and the model is downloaded once and cached for offline use. The project is MIT-licensed, with the first model download being about 0.8 GB.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Delayed JavaScript Broke a WordPress Mobile Menu Despite Strong PageSpeed Scores

A WordPress site scoring in the high 90s on mobile PageSpeed Insights had a hamburger menu that failed to respond reliably when tapped on a real phone. The site used the Kadence theme and LiteSpeed Cache, with JavaScript deferral enabled to reduce initial page load work. Desktop and emulated mobile checks did not reproduce the issue, but bypassing LiteSpeed's Page Optimization layer made the menu work again. The author then excluded the Kadence navigation scripts from delayed loading, noting these filename-based exclusions depend on the specific theme and setup. The author stresses this was not a controlled experiment and that the exact cause was not fully confirmed.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Sloth Nap: a local agent picks two morning tasks from a skipped-chores pile

A submission to the Hacktoberfest Open-Source AI Challenge describes Sloth Nap, a tool that ranks chores likely to be skipped and surfaces the one dated note in a pile of notes. It then leaves two short tasks for the morning, such as filing receipts and replying to a landlord, totaling about 55 minutes. Nothing is deleted, and archiving notes requires a human approval that is recorded before the copy and confirmed afterward. The demo ran fully offline using a template, since Ollama was not installed, and the author explicitly notes it was not a Gemma model run. The project is MIT-licensed and has no public GitHub remote yet.

0 comments Read more at DEV Community