snagg
What defenders need from frontier AI labs
Harnesses and post-training close the open-weight bug-finding gap
The AlphaGo moment for vulnerability research?
Deepfake Impersonation Attacks (Part 1): Anatomy of Modern Deepfakes
Re:Comparing Auth from Supabase, Firebase, Auth.js, Ory, Clerk and Others
on Friday October 25, 2024 @05:15PM (#41949855)
Hey,
Co-founder of SlashID here (one of the companies mentioned above). I think we have exactly what you are looking for:
https://www.slashid.dev/blog/anonymous-users/
https://developer.slashid.dev/docs/access/concepts/anonymous...
Hit me up if you want to chat more: [email protected]
Protecting third-party credentials: Credential Tokenzation
Secure API and M2M Access with OAuth2 Client Credentials
Building a globally distributed Identity Platform
Passkeys Adoption Trends: Survey from Large Deployments
Single Sign-On Implementation: Security Issues and Best Practices
Exploiting Undocumented API to Regenerate Google Service Cookies
GPT in 500 Lines of SQL
Exploiting Undocumented API to Regenerate Google Service Cookies
Firebase Authentication User Enumeration Bug
Show HN: OpenAPI OAuth 2.0 scopes enforcement for APIs
OAuth 2.0 Scopes enforcement on APIs
Rate Limiting for Large-Scale, Distributed Applications Using GCRA
To Schnorr and Beyond
Context-Aware Authentication
On the Future of Cloud Services and BYOC
Back End Authentication and Authorization Patterns
Getting RCE in Chrome with incorrect side effect in the JIT compiler
NSA, FBI, and CISA Release Cybersecurity Information Sheet on Deepfake Threats
No-code anti-phishing protection of internal apps with Passkeys
Re:When MFA isn't MFA, or how we got phished
on Sunday September 24, 2023 @06:40AM (#37631878)
Worth noting that implementing FIDO2/Passkeys is more challenging than it looks both from a UX standpoint and from a threat modeling standpoint. We tried to cover some of this in a blog post, in case anybody is interested: https://www.slashid.dev/blog/passkeys-security-implementatio...