News for hackers. Stuff that matters.
Re:Taking Over Booking.com by abusing social login by ynvb on Thursday March 02, 2023 @09:55AM (#34996378)
See a short demo video here: https://youtu.be/IK_AV1UFS-0
[ Parent | on HN ]
Re:Taking Over Booking.com by abusing social login by decolight on Thursday March 02, 2023 @11:05AM (#34997423)
This stuff is good, thanks for sharing!
[ Parent | on HN ]
Re:Taking Over Booking.com by abusing social login by ynvb on Thursday March 02, 2023 @12:16PM (#34998596)
We’re glad you like it ;) Look out for more coming up soon…
[ Parent | on HN ]
Re:Taking Over Booking.com by abusing social login by mooreds on Thursday March 02, 2023 @11:34AM (#34997959)
Really enjoyed this. In general, horrible idea to accept anything other than a fixed list of redirect_uris in production.

OAuth 2.1 actually codifies that as a best practice: https://www.ietf.org/archive/id/draft-ietf-oauth-v2-1-07.htm...

[ Parent | on HN ]
Re:Taking Over Booking.com by abusing social login by ynvb on Thursday March 02, 2023 @12:15PM (#34998577)
That’s very interesting, thx!
[ Parent | on HN ]