GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Jan Wildeboer 😷:krulorange: (jwildeboer@social.wildeboer.net)'s status on Wednesday, 15-Jan-2025 05:05:28 JSTJan Wildeboer 😷:krulorange:Jan Wildeboer 😷:krulorange:

    #Oops. "Login with Google" can be abused if you buy a domain name that formerly had accounts, e.g. from a failed startup.

    "At the time of writing, there is no fix."

    https://trufflesecurity.com/blog/millions-at-risk-due-to-google-s-oauth-flaw

    In conversationabout 16 days ago from social.wildeboer.netpermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: framerusercontent.com
      Millions of Accounts Vulnerable due to Google’s OAuth Flaw ◆ Truffle Security Co.
      Millions of Americans can have their data stolen right now because of a deficiency in Google’s “Sign in with Google” authentication flow. If you’ve worked for a startup in the past - especially one that has since shut down - you might be vulnerable.
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.