News for hackers. Stuff that matters.

A comment on Facebook says new bug allowed apps access to private photos of up to 6.8M users. Parent comment

Re:Facebook says new bug allowed apps access to private phot... by CuriousSkeptic on Friday December 14, 2018 @02:37PM (#18683878)
I just spent som time going through this.

The relevant rfc and drafts perhaps? https://tools.ietf.org/wg/oauth/

Also checkout OWASP https://www.owasp.org/

If your implementing openid connect, use a certified lib https://openid.net/developers/certified/

[ Parent | on HN ]
Re:Facebook says new bug allowed apps access to private phot... by jammygit on Saturday December 15, 2018 @02:28PM (#18689908)
Thanks (to both replies)
[ Parent | on HN ]