OAuth - Why it doesn't work, and how to Zero-day attack existing services

Since this article is extremely long, it is also available in a PDF version . This article also has a companion website .  Intro What is OAu...

This just in, 20% of enterprises and most IT people are idiots

So, who still runs Internet Explorer 6? I do, because sometimes, I'm a web developer. Along with IE 6, I also run later versions of IE, ...

Malicious hackers are not out there

Security as it is today is an illusion. What? How could I say that, I'm not serious, am I? Most people today do not understand what secu...