Pulse of Truth

1469 readers

33 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 2 years ago

MODERATORS

krogoth

Google OAuth Vulnerability Exposes Millions via Failed Startup Domains (thehackernews.com)

submitted 7 months ago by lemmydev2 to c/pulse_of_truth

0 comments fedilink hide all child comments

New research has pulled back the curtain on a "deficiency" in Google's "Sign in with Google" authentication flow that exploits a quirk in domain ownership to gain access to sensitive data. "Google's OAuth login doesn't protect against someone purchasing a failed startup's domain and using it to re-create email accounts for former employees," Truffle Security co-founder and CEO Dylan Ayrey said

no comments (yet)

sorted by: hot top controversial new old

there doesn't seem to be anything here