Include a section on transaction code brute-force attack protection in 1.0 errata
Open
@awoie is already working on this.
Since Feb 12, 2026.
ready-for-PR
- Dominant language
- No language data
- Stars
- 125
- Forks
- 41
- PR merge metrics
- No merged PRs in 30d
Description
PR #686 adds an additional error code, but also adds a section on "transaction code guessing". The existing 1.0 text doesn't seem to include a warning on brute force attacks using transaction code and how to mitigate it. The WG thought it might be good to add this to errata as this is a valid attack vector that needs to be guarded against.
Note: this was discussed during WG call on 2026-02-05
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.