[Dailydave] OAuth vulnerabilities, and insane partial disclosure people.

Dave Aitel dave.aitel at gmail.com
Wed Apr 22 18:20:13 EDT 2009


http://news.cnet.com/8301-13577_3-10225103-36.html

Apparently OAuth has a vulnerability (which was pretty obvious when
Twitter pulled it down without saying why).  But, in the spirit of
Christmas, they've decided to say there IS a vulnerability, but we're
not going to tell you what it is. Anyone care to guess?

-dave


More information about the Dailydave mailing list