Re: [Full-disclosure] Security risks in public APIs?

2011-10-26 Thread GloW - XD
My own thoughts is, aslong as FaceBook continues to live, there will always be that million people who will not bother to worry, because afterall, its not theyre website, so, why even bother to use a secure api... if you know your security enough then, it is a well known target for any attack and w

[Full-disclosure] Security risks in public APIs?

2011-10-26 Thread Adam Behnke
Hello full disclosurites, what do you think about security in public APIs? Dan Morrill here at InfoSec Institute writes about how to insecurely and securely use APIs in the Facebook SDK: http://resources.infosecinstitute.com/api-security/ Your thoughts?