<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Evan Skrukwa</title><link>https://skrukwa.com/</link><description>Recent content on Evan Skrukwa</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 31 Jul 2026 00:12:12 -0400</lastBuildDate><atom:link href="https://skrukwa.com/index.xml" rel="self" type="application/rss+xml"/><item><title>From Leaked Promo Codes to Arbitrary Database Writes</title><link>https://skrukwa.com/posts/chexy-2026-07-31/</link><pubDate>Fri, 31 Jul 2026 00:12:12 -0400</pubDate><guid>https://skrukwa.com/posts/chexy-2026-07-31/</guid><description>&lt;p&gt;I recently signed up for Chexy, a service that allows you to earn credit card rewards by paying for e-transfers or bill payments with your credit card. I had received a marketing email containing a promo code to waive my first payment&amp;rsquo;s fees, as long as I created the payment by the end of the month. A few days before the end of the month, I attempted to use the promo code, but ran into the following error.&lt;/p&gt;</description></item></channel></rss>