all systems operationalall operational

apenaloza.cl · bitácora

SCL (UTC−3) · v2026.10

$ ls -lt ~/blog | grep #security

#security

Posts about security

★ latest · 4 min · #flutter

When secure storage locks you out of login: BAD_DECRYPT in Flutter and Android

A login that works on almost every phone but always fails on a few Android devices, even with the right password. The culprit wasn't the network or the server: it was the secure storage encryption. What happens, how to diagnose it, and how to fix it without losing sessions.

  • flutter
  • android
  • debugging
  • security
  • mobile
Portada de BAD_DECRYPT: candado azul agrietado con una fisura roja junto al texto "cuando el almacenamiento seguro te bloquea el login" y las etiquetas Flutter, Android y flutter_secure_storage

All entries

2 entries · sorted by date

  1. · 12 min

    PHP2Shell: what CVE-2026-109618 and CVE-2026-109619 are and how to protect your PHP servers

    Two critical PHP flaws allow unauthenticated remote code execution, before your application even runs. Which versions are affected, who is exposed, what Cloudflare's WAF covers, how to update and what to mitigate in the meantime.

    • #php
    • #security
    • #vulnerabilities
    • #laravel