Aaron Parecki

50°F

#security

If you've ever needed a link to send someone to explain why OAuth secrets aren't safe in mobile apps, I made you a thing: https://developer.okta.com/blog/2019/01/22/oauth-api-keys-arent-safe-in-mobile-apps

San Francisco, California, USA • 59°F

13 likes 10 reposts 3 replies

Tue, Jan 22, 2019 4:09pm -08:00 #oauth #oauth2 #api #security
Blue Iris - Video Security Software (blueirissoftware.com)

Wed, Jan 16, 2019 10:26pm -08:00 #homeautomation #security #camera
willman duffy https://twitter.com/willmanduffy

0 factor auth

Portland, Oregon • 52°F

Thu, Dec 13, 2018 3:45pm +00:00 (liked on Mon, Dec 17, 2018 2:59pm -08:00) #security #auth #mfa
NFC Card Emulation with ACR122u(PN532) (salmg.net)

Sun, Dec 2, 2018 3:04pm -08:00 #nfc #security #oauth
Yet another example of why SMS is terrible for 2fa and account recovery.

"the database — running on Amazon’s Elasticsearch — was configured with a Kibana front-end, making the data within easily readable"

https://techcrunch.com/2018/11/15/millions-sms-text-messages-leaked-two-factor-codes/

Chicago, Illinois, USA • 39°F

7 likes 9 reposts 2 replies

Fri, Nov 16, 2018 3:23pm -06:00 #security #sms #2fa
Shinobi - Simple CCTV and NVR Solution - Home (shinobi.video)

Tue, Aug 7, 2018 8:01pm -07:00 #cctv #security
Securing Web Sites Made Them Less Accessible – Eric’s Archived Thoughts (meyerweb.com)

Tue, Aug 7, 2018 4:01pm -07:00 #https #security #web
WireGuard: fast, modern, secure VPN tunnel (www.wireguard.com)

Sun, Jul 29, 2018 8:03pm -07:00 #vpn #security
Gmail OAuth Phishing Goes Viral | Duo Security (duo.com)

Tue, Jul 17, 2018 4:41pm -07:00 #oauth #security #google #gmail
Well this looks handy https://twitter.com/mraible/status/1017546900122361861

Portland, Oregon, USA • 94°F

3 likes

Thu, Jul 12, 2018 4:28pm -07:00 #security #paseto
Troy Hunt: Pwned Passwords in Practice: Real World Examples of Blocking the Worst Passwords (www.troyhunt.com)

Tue, May 29, 2018 9:54am -07:00 #okta #password #security
#tbt to when Facebook used to ask for your email password so that it could download your contact list lol omg 😱😂

Portland, Oregon • 65°F

5 likes 3 reposts 1 reply 2 mentions

Thu, Apr 19, 2018 2:40pm -07:00 #oauth #security #facebook #tbt
I'm looking forward to #WebAuthn rolling out to more browsers and devices! 🔐 Here's a little taste of what's coming 🔜 https://developer.okta.com/blog/2018/04/17/webauthn-developers-guide-to-whats-on-the-horizon

Portland, Oregon • 43°F

13 likes 9 reposts

Tue, Apr 17, 2018 7:45am -07:00 #webauthn #security
The dots do matter: how to scam a Gmail user (jameshfisher.com)

Sat, Apr 7, 2018 12:55pm -07:00 #gmail #email #phishing #security
How HomeKit's software authentication works (www.imore.com)

Tue, Apr 3, 2018 6:15am -07:00 #ios #security #homekit
infosec.mozilla.org (infosec.mozilla.org)

Fri, Mar 2, 2018 10:26am -08:00 #security #resources
I’m harvesting credit card numbers and passwords from your site. Here’s how. (medium.com)

Sat, Jan 6, 2018 3:14pm -08:00 #clickbait #security
Why Raspberry Pi isn't vulnerable to Spectre or Meltdown - Raspberry Pi (www.raspberrypi.org)

Sat, Jan 6, 2018 9:39am -08:00 #cpu #raspi #spectre #meltdown #security
'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign (www.theregister.co.uk)

Tue, Jan 2, 2018 10:17pm -08:00 #cpu #security #notmyjob
Nice reminder of how simple phishing attacks can be. Hope Apple does something about this! https://krausefx.com/blog/ios-privacy-stealpassword-easily-get-the-users-apple-id-password-just-by-asking #ios #security

Portland, Oregon, USA

6 likes 4 reposts 1 reply 1 mention

Tue, Oct 10, 2017 7:27am -07:00 #ios #security #password

older