Recently I reported a crash bug in Google Chrome (issue #533361). This issue reminded me of the recent Skype vulnerability - both occur wi...

Some stir recently was caused by OAuth open redirector and even an RFC security addendum was created for it. While this was known for quit...

A few days ago I performed an experiment and added the following code to my blog: <img src="https://www.linkedin.com/profile/view?...

Outlook.com webmail service has a nice feature - it highlights potentially incorrect e-mail addresses in the "To" field. But what...

A lot has been written about dangers of mistakes in OAuth implementations. Here’s another story. Microsoft uses a specialized OAuth scope...

Login CSRF is an often overlooked web vulnerability. Developers tend to focus on securing user data and assume that users wouldn't volun...

If you remember ad.corp.google.com from the previous post , maybe you are wondering whether it stands for "Active Directory"? Look...