68°F

Aaron Parecki

  • Articles
  • Notes
  • Photos
  • BSides PDX

    Oct
    25
    Oct
    26
    October 25, 2019 at 9:00am (-0700)
    through October 26, 2019 at 7:00pm (-0700)
    Oregon Convention Center
    777 NE Martin Luther King Jr Blvd, Portland, Oregon, US
    #oauth #okta #oktadev
    permalink
    • How to Hack OAuth

      Oct
      26
      October 26, 2019
      11:00am - 12:00pm (-0800)
      Oregon Convention Center
      777 NE Martin Luther King Jr Blvd, Portland, Oregon, US
      BSides Portland
      View Slides
      Watch Video
      OAuth is the foundation of most of modern online security, used everywhere from signing in to mobile apps, to protecting your bank accounts. Despite its ubiquity, it is still often difficult to implement safely and securely, especially in today’s landscape, which is dramatically different from the world of online security as it existed when OAuth was initially created.

      This talk will explore several real-world OAuth hacks that affected major providers like Twitter, Facebook and Google. I’ll share the details of how each specific attack happened, as well as what they could have done to prevent it. Some of these attacks exploited technical flaws in the system, and some exploited the easier to hack, squishier component in the middle: people.
      #oauth #bsidespdx
      permalink
Posted in /events using quill.p3k.io

Hi, I'm Aaron Parecki, co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and am the editor of several W3C specifications. I help people learn about video production and livestreaming.

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Security Architect at Okta
  • IndieWebCamp Founder
  • OAuth WG Member

  • ⭐️ Life Stack
  • ⚙️ Home Automation
  • 🎥 YouTube
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Sleep
  • Trips
  • Videos
  • Contact
© 1999-2021 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons