Beginner's guide to OpenID phishing - The Diigo Meta page

• 04 Jun 07
  

  Fuzbolero .

  development educate-the-users learning openid security

  • OpenID  is a web-based, distributed authentication protocol set to become a standard way of signing in to websites. OpenID enables you to keep  control over your own identity by separating identity 'providers' and 'consumers'. You register your 'identity' or 'account' at a single OpenID  provider and then you have instant access to a vast array of service providers that are OpenID consumers. However, with great power comes great  responsibility. OpenID is highly susceptible to phishing attacks unless proper counter-measures are taken by the providers. We will demonstrate how to do a very simple phishing attack that already works for most OpenID providers. We will also give some possible (non-)solutions to the problem.
  • Identity providers are currently popping up like mushrooms,  actually quicker than consumers. Only few of them realise what kind of responsibilities lie on  their shoulders. OpenID might just be the dawn on a new web era,  in which the scattered identities of web users start to take shape.  In this new era an identity provider is a crucial gathering point that should cherish its members like a mother hen. Don't let them  go the wrong way. Want the best for them.
• 13 May 07
  

  Xavier Gorse

  openid phishing security

• 01 May 07
  

  Jose Luis Moya C

  openid

• 18 Apr 07
  

  Jaap van Wingerde

  openid authentication security phishing

• 13 Apr 07
  

  Tim Lossen

  openid security phishing

• 03 Apr 07
  

  Ludovico Magnocavallo

  OpenID is highly susceptible to phishing attacks unless proper counter-measures are taken by the providers. We will demonstrate how to do a very simple phishing attack that already works for most OpenID providers. We will also give some possible (non-)sol

  openid security phishing identity delicious

• 31 Mar 07
  

  Di Ci

  openid security phishing identity php lang_en

• 

  Jean-Marc Fontaine

  openid phishing sécurité web

• 28 Mar 07
  

  roadtrippin

  openid webdev

• 26 Mar 07
  

  julioalonso

  openid seguridad phishing

• 

  paul petty

  openid

• 24 Mar 07
  

  dougransom

  openid

• 

  cinefilo

  openid seguridad phishing guia ingles

• 

  OpenID is a web-based, distributed authentication protocol set to become a standard way of signing in to websites. OpenID enables you to keep control over your own identity by separating identity 'providers' and 'consumers'. You register your 'identity' o

  openid phishing

Would you like to comment?

Join Diigo for a free account, or sign in if you are already a member.