What is OAuth, and why should you care? Here’s the deal: Just like Skynet of Terminator fame, web apps have lately been doing a lot more talking to each other on the “back-end” instead of all web communication being between a human and a web app. This is a GOOD thing as long as the humans control what talks to what and what data is shared. Instead of copying and pasting a whole bunch of data from Web App A into Web App B, you can now just give Web App B permission to go get it. And if you ever change anything on Web App A, you only need to change it there: Web App B will pick it up. This makes things convenient, but in the past it required giving Web App B your password to Web App A! As a developer, I understand why they really do need this info, but you don’t need to be a paranoid security analyst like me to imagine how easily an evil person could promise an app that does something cool, suck up your credentials, and use them for nefarious purposes. And nowhere is this more true than on Twitter.
Continue reading OAuth: Totally!
|
|||||
 6 comments - (Comments are closed)  Geek Stuff, Hacking and Security  authentication, authorization, Bar Camp Portland, credentials, hack, hackers, handshake, humans, json, Legacy, Oauth, password, PHP5, security, serious hackers, skynet, third party, third party application, token, twitter, web application
Comments are closed Fun Web and Blog Goodies, Geek Stuff Andy Murd, badge, blog, embed, feed, followers, friends, georss, javascript, map, mashups, password, pipes, third party, tweeple, twitter, username, visual, yahoo pipes Anyone who tweets or sends URL’s in emails likes short URL’s for different reasons. Twitter users like ‘em because of the 140 char limit for tweets. You don’t want to use all 140 chars allocation on some hairy ugly URL–you also need a few to hint what it IS! Programmatic email senders like ‘em because they fit on one line. Is there an API to do this under program control? 8 comments - (Comments are closed) Fun Web and Blog Goodies, Geek Stuff, Hacking and Security API, automate, crunch, curl, email client, Exception, function, GET, getTinyUrl, hairy ugly URL, line, link, linkedin, multi-line links in email, PHP, POST, query string, support, third party, TinyURL, TinyURL API, toolbar, toolbar button, trivial api, twitter |
|||||
|
Copyright © 2012 Hot Dorkage - All Rights Reserved |
|||||