[Dailydave] OAuth vulnerabilities, and insane partial disclosure people.
Dave Aitel
dave.aitel at gmail.com
Wed Apr 22 18:20:13 EDT 2009
http://news.cnet.com/8301-13577_3-10225103-36.html
Apparently OAuth has a vulnerability (which was pretty obvious when
Twitter pulled it down without saying why). But, in the spirit of
Christmas, they've decided to say there IS a vulnerability, but we're
not going to tell you what it is. Anyone care to guess?
-dave
More information about the Dailydave
mailing list