News for hackers. Stuff that matters.
Re:Show HN: A microservice that makes adding authentication ... by pluma on Monday February 20, 2017 @10:39AM (#13688119)
So in other words StackOverflow etc (i.e. all non-trivial apps that support third-party login via OAuth) are all broken from a security POV?
Re:Show HN: A microservice that makes adding authentication ... by homakov on Monday February 20, 2017 @01:54PM (#13689862)
In one way or another. Most are vulnerable to bugs in standard (see sakurity.com/oauth) but every single one depends on central authority which is just stupid for auth.