[kwlug-disc] Serious security flaw in OAuth and OpenID discovered

[Kiwi R Ssennyonjo]

Kiwi Ssennyonjo shared with you:
 
 		    
Serious security flaw in OAuth and OpenID discovered
CNET News - Beware of links that ask you to log in through Facebook. The OAuth 2.0 and OpenID modules are vulnerable. iStockphoto

Following in the steps of the OpenSSL vulnerability Heartbleed, another major flaw has been found in popular open-source security software. This time, the holes have been found in the login tools OAuth and OpenID, used by many websites and tech titans including Google, Facebook, Microsoft, and LinkedIn, among others.


Available on the App Store.



-Kiwi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20140502/2b27c4be/attachment.htm>