// archives

exploit

This tag is associated with 1 posts

Hong Kong researchers develop OAuth exploit

By ⋅ November 10, 2016 ⋅ Post a comment

Third-party applications that allow single sign-on via Facebook and Google and support the OAuth 2.0 protocol, are exposed to account hijacking. Three Chinese University of Hong Kong researchers presented at Black Hat EU last week a paper called “Signing into One Billion Mobile LApp Accounts Effortlessly with OAuth 2.0.” The paper describes an attack that […]

—