OAuth - Why it doesn't work, and how to Zero-day attack existing services

Since this article is extremely long, it is also available in a PDF version . This article also has a companion website .  Intro What is OAu...

Common LibreSSL porting mistakes

The other day I wrote an article discussing LibreSSL , and the common mistakes being made by those thinking they know how to port it to oth...

OAuth - A great way to cripple your API

Intro  A few years ago, the big social networking sites were looking for a secure way to allow their users to safely use any and all untrust...