Experimental News Clipping Site

Tag: OAuth

  • Hacker News: Eartho: Open-Source, Privacy-Focused Alternative to Google Sign-In

    —

    by

    system automation
    in

    Source URL: https://github.com/eartho-group/eartho Source: Hacker News Title: Eartho: Open-Source, Privacy-Focused Alternative to Google Sign-In Feedly Summary: Comments AI Summary and Description: Yes Summary: Eartho is an open-source authentication solution that emphasizes user privacy by acting as a layer between users and major authentication providers like Google and Facebook. This unique setup not only protects user…

  • CSA: Why Is Google Ending Support for Less Secure Apps?

    —

    by

    system automation
    in

    Source URL: https://cloudsecurityalliance.org/articles/app-specific-passwords-origins-functionality-security-risks-and-mitigation Source: CSA Title: Why Is Google Ending Support for Less Secure Apps? Feedly Summary: AI Summary and Description: Yes Summary: Google’s announcement to terminate support for Less Secure Apps (LSAs) highlights the importance of App-Specific Passwords (ASPs) and the lingering security concerns they carry. This transition marks a significant improvement in user…

  • Simon Willison’s Weblog: Grant Negotiation and Authorization Protocol (GNAP)

    —

    by

    system automation
    in

    Source URL: https://simonwillison.net/2024/Oct/14/grant-negotiation-and-authorization-protocol-gnap/#atom-everything Source: Simon Willison’s Weblog Title: Grant Negotiation and Authorization Protocol (GNAP) Feedly Summary: Grant Negotiation and Authorization Protocol (GNAP) RFC 9635 was published a few days ago. GNAP is effectively OAuth 3 – it’s a newly standardized design for a protocol for delegating authorization so an application can access data on your…

  • Simon Willison’s Weblog: OAuth from First Principles

    —

    by

    system automation
    in

    Source URL: https://simonwillison.net/2024/Sep/5/oauth-from-first-principles/#atom-everything Source: Simon Willison’s Weblog Title: OAuth from First Principles Feedly Summary: OAuth from First Principles Rare example of an OAuth explainer that breaks down why each of the steps are designed the way they are, by showing an illustrative example of how an attack against OAuth could work in absence of each…

  • Simon Willison’s Weblog: Musing about OAuth and LLMs on Mastodon

    —

    by

    system automation
    in

    Source URL: https://simonwillison.net/2024/Aug/24/oauth-llms/#atom-everything Source: Simon Willison’s Weblog Title: Musing about OAuth and LLMs on Mastodon Feedly Summary: Musing about OAuth and LLMs on Mastodon Lots of people are asking why Anthropic and OpenAI don’t support OAuth, so you can bounce users through those providers to get a token that uses their API budget for your…