On: Stealing OAuth tokens of Microsoft accounts via op...

[tptacek]

Is Harvest an important app? Implicit-flow open redirect bugs are pretty bread-and-butter, so it's odd to see one at the top of HN. Are people reading this title as if it was a major Microsoft vulnerability?

[drawkbox → tptacek]

Might be misdirection PR because of the recent Okta issues which were directly at Okta. [1] Okta having lots of issues last few years. [2]

[1] https://arstechnica.com/security/2023/10/okta-says-hackers-b...

[2] https://en.wikipedia.org/wiki/Okta,_Inc.#Security_incidents