Security News

3120 readers

1 users here now

founded 2 years ago

MODERATORS

jerry@infosec.pub

Google OAuth Vulnerability Exposes Millions via Failed Startup Domains (thehackernews.com)

submitted 5 months ago by IllNess@infosec.pub to c/securitynews@infosec.pub

0 comments fedilink hide all child comments

New research has pulled back the curtain on a "deficiency" in Google's "Sign in with Google" authentication flow that exploits a quirk in domain ownership to gain access to sensitive data.

no comments (yet)

sorted by: hot top controversial new old

there doesn't seem to be anything here