OAuth - Why it doesn't work, and how to Zero-day attack existing services

Since this article is extremely long, it is also available in a PDF version . This article also has a companion website .  Intro What is OAu...

The failure of fragmented security

With recent attacks against SSL/TLS and certificates , everyone has been thinking a lot about security. What can we do to prevent security ...

Does anyone understand types and magnitudes?

Regularly I have to work with many popular libraries out there, as well as many libraries written by coworkers and similar. One thing which ...