OAuth 2.0 and OpenID Redirect Vulnerability

Re:OAuth 2.0 and OpenID Redirect Vulnerability by mQu on Friday May 02, 2014 @10:36AM (#7685916)

Correct me if I'm wrong but it seems that this isn't even old news. It's by design - something inherent to OAuth authentication scheme.

Also both CNet and the original are so light on details it's scary. I get the feeling though that we've entered an era for "vulnerability sites" - instead of CVEs we're now getting marketing.

[ Parent | on HN ]

Re:OAuth 2.0 and OpenID Redirect Vulnerability by davesque on Friday May 02, 2014 @10:52AM (#7686022)

Yeah, that guy's site reminds me of the site which was set up for the heartbleed vulnerability. Heartbleed probably justified its own site since it was such a big deal. I'm not sure this qualifies. Maybe people are starting to think that they can call attention to known weaknesses with a dedicated site and get some cred. As you said, kind of a marketing tactic.

[ Parent | on HN ]

Re:OAuth 2.0 and OpenID Redirect Vulnerability by anon1385 on Friday May 02, 2014 @11:06AM (#7686106)

>instead of CVEs we're now getting marketing.

Well that is what patio11 and other were calling for after heartbleed. More marketing! More selling yourself! Always be selling!

[ Parent | on HN ]