another day, another account takeover caused by an open ... • Aaron Parecki

50°F

another day, another account takeover caused by an open redirector and the OAuth Implicit flow 🫠

https://salt.security/blog/traveling-with-oauth-account-takeover-on-booking-com

Portland, Oregon • 40°F

Thu, Mar 2, 2023 10:16am -08:00 #oauth #security

14 likes 4 reposts 1 reply
Have you written a response to this? Let me know the URL:
- Brandon Trebitowski brandontreb.com
  
  Could using PKCE fix this issue?
  
  Thu, Mar 2, 2023 3:54pm -08:00

Posted in /notes using quill.p3k.io