Episode 204 - Logging, Edge Cases, Client API Exposure

The dynamite duopoly that is Ken and Seth are back to take the AppSec news by storm. Starting with Seth's favorite topic of Auditing or Logging, Ken brings up the recent Okta vulnerability report related to plaintext logging of usernames and passwords. This is followed by a review of Troy Hunt's recent post on edge cases when interacting with 3rd-party services, which the duo extrapolates to security edge cases and things they have seen recently. Finally, a discussion on manipulation …

api applications appsec auditing back cases client duo edge edge cases endpoints exposure hunt logging manipulation okta party passwords plaintext report review security services single things troy hunt usernames vulnerability