Security issue — request for private contact

8 days ago by kowsiky to c/perchance

Hi Perchance team,

I believe I have found a potential authentication/security vulnerability involving the Perchance login state and browser local storage.

I can reproduce the issue reliably, but I don't want to publicly disclose the reproduction steps or exploit details.

Could someone from the Perchance team please provide a private channel where I can send the full vulnerability report and reproduction steps?

Regards, Kowsik Y

perchance 5 points 8 days ago

Hi, thanks, you can DM me here on lemmy by clicking my username and then clicking the "Send message" button on my profile page.

path: 0 26204463, hotness: undefined, score: 5, children: 4
Report 1 point 7 days ago

How do we see a response or verify if you have read our DMs?

path: 0 26204463 26216714, hotness: undefined, score: 1, children: 3
ccufcc 1 point 7 days ago

I think the comment plugin updated so the dev read it.

path: 0 26204463 26216714 26221552, hotness: undefined, score: 1, children: 2
Report 1 point 6 days ago

Sorry can you elaborate?

path: 0 26204463 26216714 26221552 26235489, hotness: undefined, score: 1, children: 1
ccufcc 1 point 6 days ago

there's changes so I think your concern is read and improved, just a guess.

path: 0 26204463 26216714 26221552 26235489 26242373, hotness: undefined, score: 1, children: 0
perchance
perchance

@lemmy.world

login for more options
2013
1954
240

⚄︎ Perchance

This is a Lemmy Community for perchance.org, a platform for sharing and creating random text generators.

Feel free to ask for help, share your generators, and start friendly discussions at your leisure :)

This community is mainly for discussions between those who are building generators. For discussions about using generators, especially the popular AI ones, the community-led Casual Perchance forum is likely a more appropriate venue.

See this post for the Complete Guide to Posting Here on the Community!

Rules

1. Please follow the Lemmy.World instance rules.
2. Be kind and friendly.
  • Please be kind to others on this community (and also in general), and remember that for many people Perchance is their first experience with coding. We have members for whom English is not their first language, so please be take that into account too :)
3. Be thankful to those who try to help you.
  • If you ask a question and someone has made a effort to help you out, please remember to be thankful! Even if they don't manage to help you solve your problem - remember that they're spending time out of their day to try to help a stranger :)
4. Only post about stuff related to perchance.
  • Please only post about perchance related stuff like generators on it, bugs, and the site.
5. Refrain from requesting Prompts for the AI Tools.
  • We would like to ask to refrain from posting here needing help specifically with prompting/achieving certain results with the AI plugins (text-to-image-plugin and ai-text-plugin) e.g. "What is the good prompt for X?", "How to achieve X with Y generator?"
    • See Perchance AI FAQ for FAQ about the AI tools.
    • You can ask for help with prompting at the 'sister' community Casual Perchance, which is for more casual discussions.
    • We will still be helping/answering questions about the plugins as long as it is related to building generators with them.
6. Search through the Community Before Posting.
  • Please Search through the Community Posts here (and on Reddit) before posting to see if what you will post has similar post/already been posted.

go to feed...