This Week in Security: nOAuth, MiniDLNA, and Ticket to Ride

There’s a fun logic flaw in how multiple online services handle OAuth logins, that abuses Microsoft’s Azure Active Directory service to allow account takeovers. The problem is how a site …read more

account active directory azure azure active directory directory flaw fortigate fun hackaday columns logic logins microsoft minidlna noauth oauth online services problem security security hacks service services takeovers this week in security ticket week week in security