WeChat ID
aaronpk_tv
#security
-
Chase sends 8-digit 2fa SMS codes, which seems excessive compared to the 6 that most other places use, but even weirder is that the first digit of them has always been the same, effectively making it a 7 digit code. Anyone know what's up with that? -
At long last, the OAuth working group has finished the Best Current Practice for OAuth 2.0 Security and it was just published as RFC9700! This has been a long time in the works, and I'm very thankful to everyone who has helped out with it over the years!
https://www.rfc-editor.org/rfc/rfc9700.html
This is one of the major inputs to OAuth 2.1, so I'm also very excited to be able to move that forward this year as well! -
Millions of Accounts Vulnerable due to Google’s OAuth Flaw ◆ Truffle Security Co. (trufflesecurity.com)
-
Someone broke through the chain link fence last week, in broad daylight, while I was home, and didn't notice at the time.
I started thinking about what I could do about it, and it turns out the EA Unifi cameras have a new webhook feature. So now my cameras send a webhook to Home Assistant when someone crosses a virtual line, and it will trigger the siren. Since this is a line crossing event, not generic person detection, I can leave it armed 24/7, since nobody should be in that area at all. -
Google Online Security Blog: Improving the security of Chrome cookies on Windows (security.googleblog.com)
-
Now that @1Password launched passkey support *and* it's integrated into iOS 17 with the 1Password app, I feel like I can finally actually take the plunge and set up passkeys everywhere!
No more passwords! and the login UX is so much better too! -
May the 4th be with you! Brand new OAuth shirts just launched: "I find your lack of security disturbing"
Available in a variety of styles and also as a hacker hoodie!
https://shop.oauth.net/listing/lack-of-security-disturbing?product=46
-
Excited to host the "Security Superstream: Application Security" event tomorrow with @OReillyMedia. Join experts in the field to learn about the latest techniques for securing your applications and data.
Register now: https://www.oreilly.com/live-events/security-superstream-application-security/0636920083707/0636920083706/
#security #appsec #cybersecurity
