86 in the tweets, at least 107 in the code: inside TestYourIQ

Sat, 11 Jan 2025 00:00:00 +0000

An IQ score of 86 brought me to TestYourIQ. After taking the test and inspecting its JavaScript, I found that the final calculation could not return a score below 107.

That contradiction was the starting point. The code also let me reach the results without completing a purchase, and generated certificate IDs as random numbers in the browser.

This article follows those three findings through the implementation: how the score is calculated, how the result screens are reached, and what the certificate generator actually produces. The code excerpts and test observations come from the investigation originally published on January 11, 2025.

Ander on Security Field Notes

86 in the tweets, at least 107 in the code: inside TestYourIQ