asanso

4 ms·

1.
by asanso 10y ago
I agree on all the accounts on what you said. I am probably biased by the fact I like JSON over XML. Probably JOSE just took the wrong path and could have been designed way better than it is...
2.
by asanso 10y ago
It seems that Matthew Green warned them about some of their choices though back in 2012!! https://www.ietf.org/mail-archive/web/jose/current/msg00366....
3.
by asanso 10y ago
The author of http://blog.intothesymmetry.com/2017/03/critical-vulnerabili... here FWIW. Personally I would not be so drastic. JOSE per se is not too bad (at least the idea is cool). Some crypto choices though hav
4.
by asanso 11y ago
indeed. but there is always Static DH :) even if not so popular...
5.
by asanso 11y ago
hi the author of the vuln here. this is my write up http://intothesymmetry.blogspot.ch/2016/01/openssl-key-recov...
6.
Apple Safari URI Spoofing (CVE-2015-5764)(intothesymmetry.blogspot.com)
1 points by asanso 11y ago|0 comments
7.
On (OAuth) token hijacks for fun and profit (Google/Microsoft integration)(intothesymmetry.blogspot.com)
1 points by asanso 11y ago|0 comments
8.
Open Redirect in Rfc6749 aka 'The OAuth 2.0 Authorization Framework'(intothesymmetry.blogspot.com)
2 points by asanso 12y ago|0 comments
9.
Top 5 OAuth 2 Implementation Vulnerabilities(intothesymmetry.blogspot.com)
2 points by asanso 12y ago|0 comments
10.
by asanso 12y ago
I hope Firefox will also implement nosniff
11.
Are your GitHub's data safe?(intothesymmetry.blogspot.com)
1 points by asanso 12y ago|1 comments
12.
How I have hacked Facebook again and would have stolen a valid access token)
1 points by asanso 12y ago|0 comments
13.
How I have hacked Facebook again and would have stolen a valid access token)(intothesymmetry.blogspot.ch)
2 points by asanso 13y ago|0 comments
14.
OAuth and Bug Bounty from Facebook and Google
1 points by asanso 13y ago|0 comments
15.
OAuth 2 vulnerability Facebook And Google (solved)(intothesymmetry.blogspot.ch)
1 points by asanso 13y ago|0 comments