willow9886

10 ms·

61.
by willow9886 9y ago
Yea, I coordinate with friends and family who have TV's. I also go to the theater more often. But just getting the device out of our home space means that I won't, like the author of this post, relapse into old habits! :)
62.
by willow9886 9y ago
Yes, that's what I do as well. Also, I go to the movies more often to see the films I'm actually interested in. Baby Driver was my favorite movie of the year--in fact, the best movie I've seen in many years. Dunkirk, Detroit,
63.
by willow9886 9y ago
I gave up my TV in January. I don't miss the black mirror when it's turned off. I don't miss making special space in my house for another screen. I don't miss Netflix. It has forced me to be more conscious about what I w
64.
90% of login attempts no longer made by humans(secureidnews.com)
3 points by willow9886 9y ago|1 comments
65.
by willow9886 9y ago
There's a big difference between what people should do, and what people actually do. Research consistently shows that a large percentage of people reuse passwords across many sites. [1] http://www.jbonneau.com/doc/
66.
by willow9886 9y ago
But then you're storing passwords in more services, which creates more surface area for breaches. If you shop with Amazon, host your services with Amazon, watch TV on Amazon...there's simply no way of getting around the fact that
67.
by willow9886 9y ago
Amazon offers many services, of course they are going to want users to have one set of credentials to access all those services. There are trade-offs to every security approach, but storing passwords at every web service is 100x worse.
68.
by willow9886 9y ago
I feel like my company is the last to not use Google and Salesforce... There are a million reasons why Google could lock you out of an account... If I lose my personal email, I will survive. I can't in good faith accept that type of li
69.
by willow9886 9y ago
Why do you see this as a single sign-on issue? Seems to me the issue is over reliance on large SaaS providers. Same things happens all the time to Google users.
70.
by willow9886 9y ago
Well..you can wait for the whole world to learn English--which may eventually happen, but don't hold your breath--or you can be proactive and learn the languages you want to communicate in!
71.
by willow9886 9y ago
This recently happened to a friend of mine. It was devastating. As mentioned, U2F is very scarcely supported today. The best way he came up with to secure services that insist on using SMS for 2FA (or credential reset) was to register the
72.
by willow9886 9y ago
Same exact thing happened to my friend who was using T Mobile.
73.
ONELOGIN BREACH: CLOUD SECURITY AND PROTECTING AWS KEYS(rhinosecuritylabs.com)
1 points by willow9886 9y ago|0 comments
74.
by willow9886 9y ago
This is my primary concern with SaaS identity providers--yes, they are easy to setup and administrate, but they are huge honey pots. In addition, customers are unable to do any forensic analysis to determine how their data was affected. &gt
75.
The Airline Screening Playset: Hours of Fun(teachprivacy.com)
2 points by willow9886 9y ago|0 comments
76.
DHS funds three projects using mobile devices for digital identity(secureidnews.com)
1 points by willow9886 9y ago|0 comments
77.
by willow9886 9y ago
Yes, this is spot on.
78.
by willow9886 9y ago
The frequent usage of these terms is a dead giveaway that the proposed new rules would do the exact opposite.
79.
Verizon's 2017 Data Breach Investigations Report(gluu.co)
1 points by willow9886 9y ago|0 comments
80.
by willow9886 9y ago
Good point. Web views are no good. Google has introduced the new app auth libraries (for iOS and android) which are more secure. My business partner wrote a blog about this topic: https://www.linkedin.com/pulse/webview
81.
Hackers use OAuth, fake Google apps to phish users(pcworld.com)
7 points by willow9886 9y ago|4 comments
82.
by willow9886 10y ago
The app was again pulled from the app store almost immediately...
83.
Red Hat reports $2.4 billion in revenue for fiscal year ended February 28, 2017(redhat.com)
2 points by willow9886 10y ago|0 comments
84.
Tutorial: Implementing OpenID Connect in a Django app using oxd(gluu.org)
1 points by willow9886 10y ago|0 comments
85.
Use AppAuth for Mobile Single Sign-On (SSO)(gluu.co)
1 points by willow9886 10y ago|0 comments
86.
by willow9886 10y ago
New blog published on this topic specifically: http://gluu.co/jwt-not-authn
87.
JWT is not an authentication protocol(gluu.co)
4 points by willow9886 10y ago|0 comments
88.
Introducing oxd: secure OpenID Connect client software for web applications(gluu.org)
1 points by willow9886 10y ago|0 comments
89.
Add OpenID Connect to any web app(oxd.gluu.org)
1 points by willow9886 10y ago|0 comments
90.
by willow9886 10y ago
There's been some discussion regarding the merits of using JWT's (JSON Web Tokens) instead of Connect. Mike added some clarification in the form of a comment on the blog. I also added it here [1]. Feel free to join the discussion

More ›