3 ms·
The VPN software we used was configured one day to start presenting web view for oauth sign-in with no announcements this would change. The view had no navigat
by mleo 4y ago
The VPN software we used was configured one day to start presenting web view for oauth sign-in with no announcements this would change. The view had no navigation bar. Could not right click and get properties. No way to verify that what was loaded was secure or valid. Whether any of that could be trusted is additional question, but yes, some presentations of web views are terrible.
- aaaaaaaaata 4y ago> No way to verify that what was loaded was secure or valid. Signed software from your VPN provider isn't enough? What type of attack, theoretical or otherwise, are you avoiding?
- johannes1234321 4y agoAn Oauth request loads an external website. A Network-Level attacker anywhere on the path might try to send the request elsewhere.