News for hackers. Stuff that matters.

A comment on SecureLogin Authentication Protocol 1.0. Parent comment

Re:SecureLogin Authentication Protocol 1.0 by arekkas on Monday June 05, 2017 @02:55AM (#14485743)
Other blog entries suffer the same thing, for example https://sakurity.com/blog/2017/04/24/owasp.html
[ Parent | on HN ]
Re:SecureLogin Authentication Protocol 1.0 by btasker on Monday June 05, 2017 @03:53AM (#14485967)
Oh god, there are so many things in that post which make me sad.

> Unfortunately OWASP is out of touch with reality. First Top10 was released in 2003 and back then the web was a mess. CSRF? Everywhere. XSS? Give me a minute. SQL injection? Just try another parameter.

This is idealistic to say the least. Those things are still very much issues, and sadly are likely to continue to be for some time.

[ Parent | on HN ]