Truffle Security protects your company from secret leaks with TruffleHog™ Enterprise. Scan Git repos in real-time. Detect Live API Keys across SaaS, code and cloud. Remediate your secrets and NHIs.
Visit trufflesecurity.com → On Hacker News Dec 2023 – Feb 2026
Security & Privacy 6Software Engineering 3Web & Frontend 2Hardware & Electronics 1
Millions of Americans can have their data stolen right now because of a deficiency in Google’s “Sign in with Google” authentication flow. If you’ve worked for a startup in the past - especially one that has since shut down - you might be vulnerable.
Today I’m publicizing a Google OAuth vulnerability that allows employees at companies to retain indefinite access to applications like Slack and Zoom, after they’re off-boarded and removed from their company’s Google organization. The vulnerability is easy for a non-technical audience to understand and exploit.