Playback starts YouTube’s embedded player (privacy-enhanced mode).
How to Hack OAuth
ChannelSpringDeveloperDescription from the creator
Presenter: Aaron Parecki
OAuth is the foundation of most of modern online security, used everywhere from signing in to mobile apps, to protecting your bank accounts. Despite its ubiquity, it is still often difficult to implement safely and securely, especially in today's landscape, which is dramatically different from the world of online security as it existed when OAuth was initially created.
This talk will explore several real-world OAuth hacks that affected major providers like Twitter, Facebook and Google. I'll share the details of how each specific attack happened, as well as what they could have done to prevent it. Some of these attacks exploited technical flaws in the system, and some exploited the easier to hack, squishier component in the middle: people.
Key takeaways:
You will learn what problems OAuth solves, and what it does not solve.
You'll learn the parts of OAuth that provide hackers an opportunity to attack the flow.
You'll have a better understanding of some real-world OAuth hacks that happened in the past.
Learn more about the VMware Tanzu portfolio here: cloud.vmware.com/tanzu
OAuth is the foundation of most of modern online security, used everywhere from signing in to mobile apps, to protecting your bank accounts. Despite its ubiquity, it is still often difficult to implement safely and securely, especially in today's landscape, which is dramatically different from the world of online security as it existed when OAuth was initially created.
This talk will explore several real-world OAuth hacks that affected major providers like Twitter, Facebook and Google. I'll share the details of how each specific attack happened, as well as what they could have done to prevent it. Some of these attacks exploited technical flaws in the system, and some exploited the easier to hack, squishier component in the middle: people.
Key takeaways:
You will learn what problems OAuth solves, and what it does not solve.
You'll learn the parts of OAuth that provide hackers an opportunity to attack the flow.
You'll have a better understanding of some real-world OAuth hacks that happened in the past.
Learn more about the VMware Tanzu portfolio here: cloud.vmware.com/tanzu
About this tutorial
SpringDeveloper published this 31:14 video tutorial on April 12, 2020. It has been watched 2,147 times on YouTube.
- Channel
- SpringDeveloper
- Category
- Science & Technology
- Duration
- 31:14
- Published
- April 12, 2020
- Views
- 2,147
- Likes
- 48