WeChat ID
aaronpk_tv
-
at The ReddPortland, Oregon • Sat, October 28, 2023 4:23pmVegan Night Market — with anomalily -
Portland, Oregon • Sat, October 28, 2023 12:43pm
-
Aaron Parecki
https://aaronparecki.com/
•
Oct 26
This is a good writeup on some sneaky vulnerabilities in OAuth implementations, but ultimately is just a simple access token injection attack: https://salt.security/blog/oh-auth-abusing-oauth-to-take-over-millions-of-accounts
tl;dr: Don't accept access tokens in your redirect URI (don't use the implicit flow)
PKCE solves this attack and is enforced by the server rather than relying on client developers to "verify the access token" as described in the post -
This is a good writeup on some sneaky vulnerabilities in OAuth implementations, but ultimately is just a simple access token injection attack: https://salt.security/blog/oh-auth-abusing-oauth-to-take-over-millions-of-accounts
-
was it absolutely necessary to run cables for ceiling mics in 5 rooms? definitely not. but now I am all set up to film a reality show 😂 -
I woke up before taking a pizza out of the oven in a dream and now that's going to be bugging me all day
-
at Oregon• Sat, October 21, 2023 10:12am
-
Portland, Oregon • Sat, October 21, 2023 8:21am
-
at Gate 30San Diego, California • Thu, October 19, 2023 12:12pmThis has to be one of the worst designed gates I've ever seen
-
San Diego, California • Thu, October 19, 2023 11:07am
-
San Diego, California • Thu, October 19, 2023 10:41am
-
San Diego, California • Thu, October 19, 2023 10:06am
-
Carlsbad, California • Thu, October 19, 2023 7:07am
-
Carlsbad, California • Wed, October 18, 2023 8:19am
-
Carlsbad, California • Tue, October 17, 2023 7:32am
-
Carlsbad, California • Mon, October 16, 2023 10:41am
-
San Diego, California • Mon, October 16, 2023 9:43am
-
San Diego, California • Mon, October 16, 2023 9:30am
-
at Gate 18San Jose, California • Thu, October 12, 2023 5:38pm
-
San Jose, California • Thu, October 12, 2023 5:07pm
