HackerTrans
トップ新着トレンドコメント過去質問紹介求人

redactsure

no profile record

投稿

[untitled]

1 ポイント·投稿者 redactsure·10 か月前·0 コメント

[untitled]

1 ポイント·投稿者 redactsure·10 か月前·0 コメント

Break my algorithm –> take the plaintext $20 Bitcoin you can control (Round 4)

app.redactsure.com
3 ポイント·投稿者 redactsure·11 か月前·3 コメント

See if you can break my hiding algorithm –> take the private key (Round 3)

app.redactsure.com
2 ポイント·投稿者 redactsure·11 か月前·1 コメント

See if you can break my hiding algorithm –> take the private key

redactsure.com
5 ポイント·投稿者 redactsure·11 か月前·19 コメント

Show HN: Bitcoin Challenge. Try to steal a plain text private key you can use

app.redactsure.com
14 ポイント·投稿者 redactsure·11 か月前·13 コメント

コメント

redactsure
·10 か月前·議論
I have a new browser security method. Inside this link you'll have access to a virtual browser environment. In this environment you will have the ability to control and access a plain text private bitcoin key worth 20$. There is only a single key, first one to take it ends the challenge for all. -> Demo Signup: https://app.redactsure.com -> Bitcoin Checker: https://redactsure.com/bitcoinchallenge

Note: - No mobile, keyboard required - Requires you to verify an email - Any bug is eligible for a prize if it's something I haven't seen before, just tell me.

Some people were asking about implementation I'll provide a few details. - A server hosted browser - I manipulate what you are seeing on the webpage in real time - While I don't change the underlying webpage I do manipulate your actions to the webpage - A transformer model runs in real time along side you (tries to find all sensitive words you see)

Overall the system's goals are to allow you to perform work without ever seeing the data. It's in a early prototype stage and I expect a large numbers of edge cases just from the nature of the problem. The bitcoin is a proxy to the real goal which is protecting real PII in remote work settings.

It would be nice if you tell me the bug. I would like to post how you broke it.
redactsure
·11 か月前·議論
Thanks! This is a good one. Looks like their dynamic content grabs it and places it there. It's definitely finicky.

It's gonna be a fun debug session. Timing/race conditions are always fun to debug!
redactsure
·11 か月前·議論
I have a new browser security method. Inside this link you'll have access to a virtual browser environment. In this environment you will have the ability to control and access a plain text private bitcoin key worth 20$. There is only a single key, first one to take it ends the challenge for all.

-> Demo Signup: https://app.redactsure.com -> Bitcoin Checker: https://redactsure.com/bitcoinchallenge -> Previous Winners: https://redactsure.com/leaderboard

Note: - No mobile, keyboard required - Requires you to verify an email - Any bug is eligible for a prize if it's something I haven't seen before, just tell me.

Some people were asking about implementation I'll provide a few details. - A server hosted browser - I manipulate what you are seeing on the webpage in real time - While I don't change the underlying webpage I do manipulate your actions to the webpage - A transformer model runs in real time along side you (tries to find all sensitive words you see)

Overall the system's goals are to allow you to perform work without ever seeing the data. It's in a early prototype stage and I expect a large numbers of edge cases just from the nature of the problem. The bitcoin is a proxy to the real goal which is protecting real PII in remote work settings.

It would be nice if you tell me the bug. I would like to post how you broke it.
redactsure
·11 か月前·議論
Ahhh, this is fun. My own security policy working against me! back to top of the leaderboard for you!
redactsure
·11 か月前·議論
Challenge is back up if anyone is still interested in a try: https://redactsure.com/bitcoinchallenge/
redactsure
·11 か月前·議論
Up...again
redactsure
·11 か月前·議論
bet you couldn't do it again. It's back up. Patch is a bit hacky but should work plus I blocked the signup page.

Real patch is a chromium update (like a week of work) so imma avoid that until needed.
redactsure
·11 か月前·議論
that was brutal! I knew you were holding out something. Oh man this is a brutal bug as well. That's an OS popup! That's gonna take me some time.

Actually even worse it's neither an OS level or dom level item custom chrome rendering layer.
redactsure
·11 か月前·議論
back up if you want another chance
redactsure
·11 か月前·議論
back up if you want another go -> again
redactsure
·11 か月前·議論
Back up if you want another go.
redactsure
·11 か月前·議論
I have a new browser security method. Inside this link you'll have access to a virtual browser environment. In this environment you will have the ability to control and access a plain text private bitcoin key worth 20$. There is only a single key, first one to take it ends the challenge for all.

Demo Signup: https://app.redactsure.com/ Bitcoin Checker: https://redactsure.com/bitcoinchallenge/

Limitations: - 15mins per session (why? GPU per session, limited spots) - US only is preferred (why? latency, I am streaming video to you) - No mobile, keyboard required - Requires you to verify an email

Some people were asking about implementation I'll provide a few details. - A server hosted browser - I manipulate what you are seeing on the webpage in real time - While I don't change the underlying webpage I do manipulate your actions to the webpage - A full transformer model runs in real time along side you (tries to find all sensitive words you see)

Overall the systems goals are to allow you to perform work without ever seeing the data. It's in a early prototype stage and I expect a large numbers of edge cases just from the nature of the problem. The bitcoin is a proxy to the real goal which is protecting real PII in remote work settings.

Other notes: - It would be nice if you tell me the bug. I would like to post how you broke it. - I'll post updates as well as info on bugs sessions here: https://x.com/CharlesCurt2
redactsure
·11 か月前·議論
What did you try to do? If you had the full key it should be relatively simple. Maybe I should post some instructions on claiming the key?
redactsure
·11 か月前·議論
Nice! Thanks again. You're definitely making me fix all my laziness for sure. I honestly hopped that bug would only expose the tail ends but the select and drag is definitely not something I've tried before.
redactsure
·11 か月前·議論
It is. You may have been just a little too late. It was claimed.
redactsure
·11 か月前·議論
I have a new browser security method. Inside this link you'll have access to a virtual browser environment. In this environment you will have the ability to control and access a plain text private bitcoin key worth 20$. There is only a single key, first one to take it ends the challenge for all.

Demo Signup: https://app.redactsure.com/ Bitcoin Checker: https://redactsure.com/bitcoinchallenge/

Limitations: - 15mins per session (why? GPU per session, limited spots) - US only is preferred (why? latency, I am streaming video to you) - No mobile, keyboard required - Requires you to verify an email

Some people were asking about implementation I'll provide a few details. - A server hosted browser - I manipulate what you are seeing on the webpage in real time - While I don't change the underlying webpage I do manipulate your actions to the webpage - A full transformer model runs in real time along side you (tries to find all sensitive words you see)

Overall the systems goals are to allow you to perform work without ever seeing the data. It's in a early prototype stage and I expect a large numbers of edge cases just from the nature of the problem. The bitcoin is a proxy to the real goal which is protecting real PII in remote work settings.

Other notes: - It would be nice if you tell me the bug. I would like to post how you broke it. - I'll post updates as well as info on bugs sessions here: https://x.com/CharlesCurt2
redactsure
·11 か月前·議論
Challenge is back up if anyone is still interested in a try:

https://redactsure.com/bitcoinchallenge/
redactsure
·11 か月前·議論
It is not on the client. Challenge is back up please give it a try.

https://redactsure.com/bitcoinchallenge/
redactsure
·11 か月前·議論
bug was literally 1 line of code.

I might be back up today if you want another shot.

I had no idea evil tester website had so many tools throughout it!
redactsure
·11 か月前·議論
yup if I can fix the problem today I'll launch tomorrow same thing.