Truffle Security Blog company blog
Google’s OAuth login doesn’t protect against purchasing a failed startup domain
Millions of Americans can have their data stolen right now because of a deficiency in Google’s “Sign in with Google” authentication flow. If you’ve worked for a startup in the past - especially one that has since shut down - you might be vulnerable.
- Points
- 503
- HN comments
- 285
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2025
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jan 14, 2025 | Google’s OAuth login doesn’t protect against purchasing a failed startup domain by simiones | 503 | 285 |
