3 ms·
Any blackhats have any clues as to what this is about? I'm too impatient to wait 7.5 hours :P
by timdorr 18y ago
Any blackhats have any clues as to what this is about? I'm too impatient to wait 7.5 hours :P
- tptacek 18y agoThe CNet article claims the vulnerability involves "social engineering" attacks that will coerce users into giving up personal information. "Social engineering" in web apps is usually code for "landmine links", and the OAuth protocol itself doesn't communicate any user information of any sort (just an opaque token).
- there 18y agothe advisory is up now http://oauth.net/advisories/2009-1 http://oauth.net/advisories/2009-1