Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
homakov
on March 15, 2013
|
parent
|
context
|
favorite
| on:
Achilles Heel of OAuth or Why Facebook Adds #_=_
client credentials threat is OAuth1 too.
bjourne
on March 15, 2013
[–]
Right, but other oauth2 providers than facebook aren't vulnerable to the redirect_uri hack you are describing, are they?
homakov
on March 15, 2013
|
parent
[–]
not sure, i didn't check all of them
also facebook is 90% of oauth
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
