Aaron Parecki

#security

• Evilginx 2 - Next Generation of Phishing 2FA Tokens (breakdev.org)

  #hacking #phishing #2fa #security

  Tue, Jun 29, 2021 11:04am -07:00
• How to securely store passwords in database (www.vaadata.com)

  #security #password

  Mon, Jun 28, 2021 7:29pm -07:00
• Bypassing 2FA using OpenID Misconfiguration (youst.in)

  #openid #security

  Sun, Jun 27, 2021 3:18pm -07:00
• Owncast https://botsin.space/@owncast

  OktaDev Live has just started streaming on their #owncast server! Check them out at:
  https://live.oktadev.events.

  OAuth Happy Hour

  #okta #security #api #oktadev #oauth

  

  Portland, Oregon • 66°F

  #oauth #oktadev #api #security #okta #owncast

  Thu, Jun 10, 2021 11:03pm +00:00 (liked on Thu, Jun 10, 2021 5:05pm -07:00)
• Apple says its new logon tech is as easy as passwords but far more secure - CNET (www.cnet.com)

  #apple #security #icloud #passkey #wwdc #wwdc21

  Thu, Jun 10, 2021 3:08pm -07:00
• OAuth 2.0 Threat Model Penetration Testing Checklist (www.binarybrotherhood.io)

  #oauth #security

  Thu, Jun 3, 2021 9:07am -07:00
• The SSO Wall of Shame | A list of vendors that treat single sign-on as a luxury feature, not a core security requirement. (sso.tax)

  #sso #openid #security

  Tue, May 25, 2021 4:50pm -07:00
• Humanity wastes about 500 years per day on CAPTCHAs. It’s time to end this madness (blog.cloudflare.com)

  #cloudflare #captcha #webauthn #security

  Mon, May 17, 2021 8:27pm -07:00
• 

  If your company is big enough to roll out a mandatory VPN on personal iOS devices, they are big enough to buy you a work phone https://twitter.com/gabrtv/status/1391951192176021505

  Portland, Oregon • 76°F

  96 likes 18 reposts 6 replies 2 mentions

  #ios #vpn #security

  Wed, May 12, 2021 6:13pm -07:00
• Signing HTTP Messages. There’s a new draft in the HTTP working… | by Justin Richer | May, 2021 | Medium (justinsecurity.medium.com)

  #http #security #oauth

  Tue, May 4, 2021 2:31pm -07:00
• FAPI – Financial Grade API (fapi.openid.net)

  #openid #fapi #security

  Wed, Apr 7, 2021 12:11pm -07:00
• Whistleblower: Ubiquiti Breach “Catastrophic” — Krebs on Security (krebsonsecurity.com)

  #security #unifi #ubiquiti

  Tue, Mar 30, 2021 2:04pm -07:00
• Owncast https://botsin.space/@owncast

  OktaDev Live has just started streaming on their #owncast server! Check them out at:
  https://live.oktadev.events.

  OAuth Happy Hour - Live Q&A

  #okta #security #api #oktadev #oauth

  

  Portland, Oregon • 40°F

  #oauth #oktadev #api #security #okta #owncast

  Thu, Mar 25, 2021 6:05pm +00:00 (liked on Fri, Mar 26, 2021 8:08am -07:00)
• Owncast https://botsin.space/@owncast

  OktaDev Live has just started streaming on their #owncast server! Check them out at:
  https://live.oktadev.events.

  What's New in OAuth 2.1

  #okta #security #api #oktadev #oauth

  

  Portland, Oregon • 54°F

  #oauth #oktadev #api #security #okta #owncast

  Tue, Mar 23, 2021 5:10pm +00:00 (liked on Tue, Mar 23, 2021 6:20pm -07:00)
• 

  lol the phone system is so broken https://twitter.com/josephfcox/status/1371509983842598918

  Portland, Oregon, USA • 45°F

  8 likes 4 reposts 1 reply

  #sms #security #2fa

  Mon, Mar 15, 2021 4:15pm -07:00
• TOFU Attack: Your registration flow is a breach waiting to happen... (paul.reviews)

  #security

  Sat, Mar 13, 2021 7:01am -08:00
• trimstray/nginx-admins-handbook: How to improve NGINX performance, security, and other important things. (github.com)

  #nginx #books #tutorial #security

  Thu, Mar 11, 2021 5:24pm -08:00
• A CSO’s perspective on the recent Verkada cyber attack | Okta Security (sec.okta.com)

  #security #okta #hack

  Thu, Mar 11, 2021 3:38am -08:00
• Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies | by Alex Birsan | Feb, 2021 | Medium (medium.com)

  #security

  Wed, Feb 10, 2021 9:51am -08:00
• What You Should Know Before Leaking a Zoom Meeting (theintercept.com)

  #zoom #security

  Wed, Jan 20, 2021 1:41pm -08:00