Mojira Archive
WEB-3357

Find the creation date of any account (security issue)

When using theĀ https://api.mojang.com/users/profiles/minecraft/<username>?at=<timestamp> endpoint, the user can bruteforce epoch times to get the exact creation date of an account. This is a security issue because Mojang support asks when the account was made as part of their verification, which can help aid hackers.

Fixed

Jake

[Mojang] Web Team

2020-11-02, 10:16 PM

2020-11-04, 02:38 PM

2020-11-04, 02:38 PM

0

0