For the cryptography fans among you, here’s a little challenge with a 50€ prize :)

For @twonly, I’m planning a backup method where users no longer have to remember a password. The idea: Instead of trusting the server, just trust your friends.

You can find the exact details here: https://tsmr.eu/blog/2026-passwordless-recovery

#cryptography #bugbounty #e2ee

Break my Passwordless Recovery Protocol and get a 50€ Bug-Bounty

I designed a passwordless recovery protocol using trusted friends and a server-side second factor for my privacy-focused messaging app twonly. To ensure its security before release, I am launching a 50€ bug bounty challenge for anyone who can find a vulnerability in the protocol.