noob question here, I'm confused on the point of the allow_redirects=False argument, where are we redirected to that doesn't have the cookie?, also if any changes are made to the cypher text why wouldn't it mess up the block that came before the cookie that would make processing of that cookie fail? does the timestamp not matter if the rest of the cookie is fine?
That is a good question, if I remember correctly I got the cookie from the response so it arrives in a 302 (redirect) response, so if you don't add the allow_redirects=False, you will be redirected somewhere and the cookie will not be in the response, because the set-cookie is only in the 302. That being said I am telling this from the top of my mind and I don't remember exactly. Will check this weekend :)
That is exactly right. We don't have the challenge code unfortunately so we cannot be sure how the challenge was done but it seems like that. Also that is why I added the example with a timestamp, if checked it would not be correct obviously. But I see you got the gist of the video so happy about that!
impressive vid pro, nice
you deserve way more views and subscribers. Top notch animation. Well done
Hey thanks! It means a lot to me ❤️
This the best explanation for "Bit Flip Attack" I've seen so far. Good job!
Excellent Video :) Keep it up mate
Thanks a lot!
Great bro how do you done this animation ?
It is done with MotionCanvas
noob question here, I'm confused on the point of the allow_redirects=False argument, where are we redirected to that doesn't have the cookie?, also if any changes are made to the cypher text why wouldn't it mess up the block that came before the cookie that would make processing of that cookie fail? does the timestamp not matter if the rest of the cookie is fine?
That is a good question, if I remember correctly I got the cookie from the response so it arrives in a 302 (redirect) response, so if you don't add the allow_redirects=False, you will be redirected somewhere and the cookie will not be in the response, because the set-cookie is only in the 302. That being said I am telling this from the top of my mind and I don't remember exactly. Will check this weekend :)
Hi, so in this case you don't care that the first block is garbage?
That is exactly right. We don't have the challenge code unfortunately so we cannot be sure how the challenge was done but it seems like that. Also that is why I added the example with a timestamp, if checked it would not be correct obviously. But I see you got the gist of the video so happy about that!