4 ms·
> seem to permit a Confused Deputy attack I'd never heard the terms "Confused Deputy" or "ambient authority" before, but it sent me on a pleasant and informati
by eric_h 9y ago
> seem to permit a Confused Deputy attack
I'd never heard the terms "Confused Deputy" or "ambient authority" before, but it sent me on a pleasant and informative internet security tangent.
https://en.wikipedia.org/wiki/Confused_deputy_problem https://en.wikipedia.org/wiki/Confused_deputy_problem
- naasking 9y agoIndeed, we've all seen the confused deputy in the wild. For instance, CSRF is a confused deputy vulnerability.
- framirez 9y agoMIT 6.858 Computer Systems Security, Fall 2014; Session 6: Capabilities https://www.youtube.com/watch?v=TQhmua7Z2cY&index=5&list=PLUl4u3cNGP62K2DjQLRxDNRi0z2IRWnNh https://www.youtube.com/watch?v=TQhmua7Z2cY&index=5&list=PLU... It is a good course.