Chapter 8

1. Security through/by obscurity is a valid way of discouraging opportunistic attacks, but it cannot be the foundation of a sound security strategy.
2. API keys, access tokens, passwords, and account and application data are all commonly reported for bounties.
3. The Burp Proxy contains settings for passively uncovering hidden fields—a simple hack.
4. An API key grants blanket access to an API or service. An access token is typically associated with more individual/role-based authentication systems, though this is not a hard and fast distinction.
5. Generic error codes and descriptions, browser "autocomplete" functionality, and information that generally doesn't provide an associated attack scenario, does not typically merit a reward.
6. It is always a mistake to trust user input.
7. Web applications are leaky, but error messages, hidden fields, and client-source code...