On 4/30/09 3:50 AM, Solberg Andreas Åkre wrote:
> FYI
>
> https://rnd.feide.no/content/vulnerable-token-creation-php-oauth-library

Ouch!  Nice find.  w/ rainbow table of MD5, recovering the secret from 
the token is a matter of seconds, d'oh!  :-)

-- 
Dossy Shiobara              | do...@panoptic.com | http://dossy.org/
Panoptic Computer Network   | http://panoptic.com/
   "He realized the fastest way to change is to laugh at your own
     folly -- then you can let go and quickly move on." (p. 70)


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to oauth@googlegroups.com
To unsubscribe from this group, send email to oauth+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/oauth?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to