121 reputation
3
bio website twitter.com/lukecharde
location Albany, NY
age
visits member for 10 months
seen Sep 22 '13 at 21:35

Sep
15
awarded  Supporter
Sep
15
revised Are most app OAuth implementations vulnerable because of an obscured URL/origin?
Grammar fix.
Sep
15
comment Are most app OAuth implementations vulnerable because of an obscured URL/origin?
I just added another example and clarified some language. The problem within apps is that the authentication webpage is not displayed in a first-class web browser... just in an embedded web viewport within the application - no address bar, protocol, or non-spoofable way to indicate if it is HTTPS.
Sep
15
awarded  Editor
Sep
15
revised Are most app OAuth implementations vulnerable because of an obscured URL/origin?
Added another example and clarified problem.
Sep
14
awarded  Student
Sep
14
asked Are most app OAuth implementations vulnerable because of an obscured URL/origin?