Хороший доклад по OAuth, вместо дюжины RCF (или как пролог к их чтению :) https://twitter.com/aaronpk/status/1179002773934706688
WeChat ID
aaronpk_tv
-
Mahmoud Gamal
https://twitter.com/Zombiehelp54
•
Oct 4
$10k for an authentication bypass by removing “employee” from the scope parameter in an oauth url which led to access all internal services with a normal user account.
do you have a link to a summary of this that's public? I would love to include this in an upcoming talk. -
😱 Came home from a trip to a failed hard drive on one of my home servers. Time to put my backup system to the test!
💾 New drive is on its way, warranty return for the old drive is started.
☁️ Once the new drive arrives, I'll attempt to restore it from my local backup. With any luck, that'll work. Otherwise I'll have to get a drive mailed to me from Backblaze.
🚀 Here we go! -
at Gate C18Chicago, Illinois • Thu, October 3, 2019 6:48pm
-
at Jazz the BarChicago, Illinois • Thu, October 3, 2019 5:39pm
-
Chicago, Illinois • Thu, October 3, 2019 4:28pm
-
Chicago, Illinois • Thu, October 3, 2019 4:12pm
-
Chicago, Illinois • Thu, October 3, 2019 4:03pm
-
Bus
2.20miDistance5:14DurationStartEnd
-
Chicago, Illinois • Thu, October 3, 2019 3:47pm
-
Chicago, Illinois • Thu, October 3, 2019 3:40pm
-
Plane
4408.75miDistance497:58DurationStartEnd
-
oh I see, it's a google thing: https://developers.google.com/web/fundamentals/architecture/app-shell
yeah I'm with @adactio on this. this is a great way to put yourself into the mindset of a native app developer, but is *far* from the only way to make a good PWA experience.
