Oh-Auth – Abusing OAuth to take over millions of accounts
OAuth Account Takeover. Salt Labs shows how hackers could abuse OAuth to take over millions of accounts on Grammarly, Vidio, and Bukalapak.
The latest blog posts to take off on Hacker News. 8,469 posts.
OAuth Account Takeover. Salt Labs shows how hackers could abuse OAuth to take over millions of accounts on Grammarly, Vidio, and Bukalapak.
Original Publish Date: June 2023 | MC650424 Revised Date: August 30, 2023, based on Microsoft's Updated Message See text in red font. Microsoft's...
It’s time to move from Buffer to Uint8Array.
We are excited to explore the latest developments in generative AI and how it can drive ML applications through image augmentation and dataset population.
I'm trying out TinaCMS to make it faster and easier to post here!
The biggest library release is finally here! Learn more about the changes, motivation behind them, and how to upgrade to the next version today.
Comparing two identically designed websites, their weight, amount of HTML and CSS, rendering speed, and best practices.
Introducing v0
System76’s COSMIC desktop environment gets a new lock screen, login screen, tiling applet, and important UI additions.
my website is one binary 2022-04-06 ---------------------------- a.k.a. this one weird trick that inspires me to program creatively i have struggled for years to figure out a website framework that feels good to me. i tried all of the classics, including but limited to: - ghost - hugo - jekyll - sr.ht + tarball …
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
Bringing Game-Style State Synchronization to the Web
An exciting proposal is expected to land in Go 1.22 - enhancing the pattern-matching capabilities of the default HTTP serving multiplexer in the net/http package.
Just days before Andy revamped his (more) Modern CSS Reset, Dave and I were line-by-lining it on ShopTalk Show. Mouthblogging is fun and all, but so is Writemouthblogging, known colloquially as …
nikitonsky: Why is nobody excited about these “yesterday”/“2 days ago”/“a week ago” labels?
Scrollbars. Ever heard of them? They’re pretty cool. Click and drag on a scrollbar and you can move content around in a scrollable content pane. I love that shit. Every day I am scrolling on my computer, all day long. But the scrollbars are getting smaller and this is increasingly becoming a problem. I would show you…
In 2017, Slack launched a popular Google Drive integration that makes it easy to embed, share, and get notified about new items added to Google Drive, including files, images, docs, and more. We use it daily here at Kapwing, an online video editing startup, since we run internally on top
Google Search is dead to me. Here's how and why Kagi's high quality results and compelling value proposition allowed me to fully make the switch.
The fediverse has arrived at WordPress.com.
We're launching the next major version of Lit
Hey there, it’s been a while! We’re back to share some more exciting news about Guile Hoot , a WebAssembly toolchain and Scheme→WASM compiler. In our last post we demonstrated that the Guile Hoot toolchain can be used to assemble programs written in WebAssembly Text (WAT) format, which allowed us to develop for the…
CRDTs sound cool, but how are they actually used? Let's learn by building a collaborative pixel art editor.
A function that computes to the first color if the used color scheme is light or unknown, or to the second color if the used color scheme is dark.
Many projects are littered with files that just re-export other files. These so called "barrel files" are one of the key reasons why JavaScript tooling is slow in bigger projects.
Now that we’ve eliminated CAPTCHAs at Cloudflare, we want to hasten the demise of CAPTCHAs across the internet. We’re thrilled to announce that Turnstile is generally available, and Turnstile’s ‘Managed’ mode is now completely free to everyone for unlimited use.
Announcing the launch of Vivaldi on iOS – a new browsing experience available now on the App Store.
Guest Post: What problems HTTP/3 solves, how it performs, why it’s seen such swift adoption, and what limitations it is still working to overcome.