2 ms·
> I have never seen a major auth provider compromised Linkedin, https://en.wikipedia.org/wiki/2012_LinkedIn_hack https://en.wikipedia.org/wiki/2012_LinkedIn_ha
by jsnell 6y ago
> I have never seen a major auth provider compromised
Linkedin, https://en.wikipedia.org/wiki/2012_LinkedIn_hack https://en.wikipedia.org/wiki/2012_LinkedIn_hack
Yahoo, https://en.wikipedia.org/wiki/Yahoo!_data_breaches https://en.wikipedia.org/wiki/Yahoo!_data_breaches
Or if we don't limit it to just data breaches but include compromises that would have allowed a full account takeover of any account using this identity provider in a third party app:
Apple, https://bhavukjain.com/blog/2020/05/30/zeroday-signin-with-apple/ https://bhavukjain.com/blog/2020/05/30/zeroday-signin-with-a...
- gowld 6y agoAlso it's strange for a minor auth provider to promote "major auth provider". Seems that would drive away potential customers.