picomputerclub
314159.xyz
Actively hiring
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
ΠCC. Sched.com is a popular event planning and management web-site. We discovered that the mobile version leaked API keys for all events, leading to the possibility of accessing password protected events, modifying any events and accessing all the stored data about speakers and registered users.
News
A peek inside the Nuki Smart Lock
Nuki provides an electronic smart lock that integrates with existing keys and cylinders by simply being mount on top of them. It offers Bluetooth connectivity and can be accessed online with the help of a bridge device which connects to the local wireless
Read more
Report
How credit cards got stolen from Tink.de
Tink.de (also Tink.us) is an online store specialized in smart-home devices. It uses a highly customized version of the Magento eCommerce platform. We found a piece of JavaScript malware embedded in their web-site which, during 4 months (from mid-July to
Read more
Report
The API credential leak in Sched.com
Sched.com is a popular event planning and management web-site. We discovered that the mobile version leaked API keys for all events, leading to the possibility of accessing password protected events, modifying any events and accessing all the stored data
Read more
Report
Protonmail API: a peek under the hood
The Protonmail Android applications uses the Protonmail API to authenticate, list, read, and send messages. We discovered, however, that it does not use any sort of certificate pinning. This allows us to have a look at how the API looks like, the login pr
Read more
Report
Report