Sensitive Information Exposure

github.com/schollz/croc is vulnerable to Sensitive Information Exposure. The vulnerability is due to the way croc uses the leading three characters of a shared secret to select a common “room name”. When custom shared secrets are used, the leading three characters might give away information about the rest of the shared secret. An attacker can exploit this flaw to guess the entire shared secret, enabling them to eavesdrop on communications.