Aaron Parecki

56°F

#security

Drummond Reed https://twitter.com/drummondreed

Biggest laugh at #IIW so far: when @justin__richer in his session on “Is #selfsovereignidentity really possible” turned to Dave Crocker and said that we can all blame him for the Internet not having #security built in from the start.

San Jose, California • 49°F

Thu, May 2, 2019 6:03pm +00:00 (liked on Thu, May 2, 2019 4:18pm -07:00) #IIW #selfsovereignidentity #security
#110293 Insufficient OAuth callback validation which leads to Periscope account takeover (hackerone.com)

Fri, Apr 12, 2019 11:37pm -07:00 #oauth #twitter #security
Security Considerations While Using ssh-agent. – Command Prompt, Inc. (www.commandprompt.com)

Fri, Apr 12, 2019 10:29am +02:00 #ssh #security
Aaron Parecki https://aaronparecki.com/

Standing room only for my talk at #oktane19! 🎉 "OAuth: When Things Go Wrong" I had a blast, thanks everyone for coming to the session!
The video will be posted to the @okta YouTube channel soon! .
.
.
#okta #oktane #oauth #security #devrel #facebookfail #twitterfail #googlefail 📷 @quorralyne

San Francisco, California • 49°F

Wed, Apr 3, 2019 3:48pm -07:00 (liked on Thu, Apr 4, 2019 7:35am -07:00) #oktane19 #okta #oktane #oauth #security #devrel #facebookfail #twitterfail #googlefail
Standing room only for my talk at #oktane19! 🎉 "OAuth: When Things Go Wrong" I had a blast, thanks everyone for coming to the session!
The video will be posted to the @okta YouTube channel soon! .
.
.
#okta #oktane #oauth #security #devrel #facebookfail #twitterfail #googlefail 📷 @quorralyne

Moscone West Convention Center in San Francisco, California, USA • 49°F

20 likes 1 repost 2 replies

Wed, Apr 3, 2019 3:48pm -07:00 #oktane19 #okta #oktane #oauth #security #devrel #facebookfail #twitterfail #googlefail
How To Spoof PDF Signatures (web-in-security.blogspot.com)

Wed, Mar 6, 2019 11:36am -08:00 #pdf #security
#202781 Chained Bugs to Leak Victim's Uber's FB Oauth Token (hackerone.com)

Mon, Feb 25, 2019 9:06am -06:00 #oauth #security #hack #bug #uber
[Uber 8k Bug] Login CSRF + Open Redirect = Account Take Over – Ron Chan (ngailong.wordpress.com)

Mon, Feb 25, 2019 9:05am -06:00 #oauth #security
Trusted Types help prevent Cross-Site Scripting | Web | Google Developers (developers.google.com)

Sun, Feb 17, 2019 7:31am -08:00 #xss #web #security
Chaining Tricky OAuth Exploitation To Stored XSS – Rohan Aggarwal – Medium (medium.com)

Sun, Jan 27, 2019 4:48pm -08:00 #oauth #security #xss
If you've ever needed a link to send someone to explain why OAuth secrets aren't safe in mobile apps, I made you a thing: https://developer.okta.com/blog/2019/01/22/oauth-api-keys-arent-safe-in-mobile-apps

San Francisco, California, USA • 59°F

13 likes 10 reposts 3 replies

Tue, Jan 22, 2019 4:09pm -08:00 #oauth #oauth2 #api #security
Blue Iris - Video Security Software (blueirissoftware.com)

Wed, Jan 16, 2019 10:26pm -08:00 #homeautomation #security #camera
willman duffy https://twitter.com/willmanduffy

0 factor auth

Portland, Oregon • 52°F

Thu, Dec 13, 2018 3:45pm +00:00 (liked on Mon, Dec 17, 2018 2:59pm -08:00) #security #auth #mfa
NFC Card Emulation with ACR122u(PN532) (salmg.net)

Sun, Dec 2, 2018 3:04pm -08:00 #nfc #security #oauth
Yet another example of why SMS is terrible for 2fa and account recovery.

"the database — running on Amazon’s Elasticsearch — was configured with a Kibana front-end, making the data within easily readable"

https://techcrunch.com/2018/11/15/millions-sms-text-messages-leaked-two-factor-codes/

Chicago, Illinois, USA • 39°F

7 likes 9 reposts 2 replies

Fri, Nov 16, 2018 3:23pm -06:00 #security #sms #2fa
Shinobi - Simple CCTV and NVR Solution - Home (shinobi.video)

Tue, Aug 7, 2018 8:01pm -07:00 #cctv #security
Securing Web Sites Made Them Less Accessible – Eric’s Archived Thoughts (meyerweb.com)

Tue, Aug 7, 2018 4:01pm -07:00 #https #security #web
WireGuard: fast, modern, secure VPN tunnel (www.wireguard.com)

Sun, Jul 29, 2018 8:03pm -07:00 #vpn #security
Gmail OAuth Phishing Goes Viral | Duo Security (duo.com)

Tue, Jul 17, 2018 4:41pm -07:00 #oauth #security #google #gmail
Well this looks handy https://twitter.com/mraible/status/1017546900122361861

Portland, Oregon, USA • 94°F

3 likes

Thu, Jul 12, 2018 4:28pm -07:00 #security #paseto

older