I thought my colleague was an alien who decoded base64 strings on the fly, but he wasn't.
It turns out there's a neat little trick to know that you're looking at a base64 encoded JSON object.
Discussion
Loading...
@thibaultamartin if you fancy looking for valid tokens in various environments, a search for eyJ may just provide you with something handy (or in my case, provide me with people to tell not to share credentials on Slack)
@thibaultamartin that is brilliant.
@thibaultamartin tbh, I hoped for more than just a "if it starts with ey"..
@thibaultamartin the human brain is great at seeing patterns
@thibaultamartin Certificates, private keys and more are easily spottable too:
echo -en "-----BEGIN CERTIFICATE-----" | base64
LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0t
You can even remember it easily because it has "tLS" in the first few characters so the beginning should look like a TLS certificate which means starting with dashes.
@thibaultamartin I knew this one. Hard not to notice when you deal with this stuff often.
What I sometimes wonder: Are there people that can decode QR codes "on the fly"? But the decoding algo is pretty sophisticated, so I *guess* no, but on the other hand, among 8 billion people …
bonfire.cafe
A space for Bonfire maintainers and contributors to communicate
Automatic federation enabled