Tagged Questions
1
vote
1answer
19 views
Does providing OAuth for mobile apps pose a security threat?
Let's take a look at the basic OAuth workflow:
The basic idea is that the Consumer (App) asks the user to grant him access to the Service Provider. The service protects the user by asking him each ...
1
vote
1answer
204 views
iOS auth/auth with a REST Webservice
we're currently in the design phase of a new "Gateway-Server" which we want to develop. Our server has a REST-Service. My task is to find viable options to protect the access to the aforementionend ...
2
votes
3answers
160 views
Using RADIUS for host authentication
Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a ...
1
vote
1answer
88 views
Are there any solutions available which conform to AAA protocol?
According to Wikipedia (http://en.wikipedia.org/wiki/AAA_protocol)
In computer security, AAA commonly stands for authentication, authorization and accounting. It refers to a security architecture ...
3
votes
1answer
696 views
what is the role of RADiUS server and Active Directory to increase the security in wireless networks?
In the CBT Nuggets Video Training, one slide about Wireless networks :
i want to know about the role of Radius to increase the security and how? in this project: Deploy Active Directory and ...
9
votes
4answers
387 views
How should I tell an organisation that they are vulnerable when I wasn't given permission to check?
I was recently at a village hall (in the UK), some distance from where I live, for a party. I noticed that they had unsecured wi-fi with an SSID of NETGEAR. I assumed it was free wi-fi for users of ...
2
votes
1answer
238 views
How does DCOM authentication compare to RPC based authentication/auth?
The following paragraph from MSFT Best Practices for 2003 PKI says Windows 2000 authenticated via RPC vs 2003 that authenticates using DCOM
A CA running Windows Server 2003, Enterprise Edition, ...
-1
votes
1answer
161 views
About important hacks in history [closed]
I would like to know how important hacks happened, because I can figure out how they hacked a website but I can't figure out how did they hacked into NASA International Space Station source code. Or ...
8
votes
1answer
510 views
What were the specific security flaws with OAuth 1.0? How are they being addressed in 2.0?
I read an article documenting Twitter abruptly pulling its OAuth support back in April 2009. The article said it wouldn't specify the hole for security reasons, but mentioned "social engineering" is ...
