The Difference Between Root Certificate Authorities, Intermediates and Resellers(agwa.name)

71 points by agwa 3 years ago | 35 comments

Fooling Go's X.509 Certificate Verification(danielmangum.com)

46 points by hasheddan 4 months ago | 25 comments

Setting up a trusted, self-signed SSL/TLS certificate authority in Linux(previnder.com)

131 points by previnder 1 year ago | 31 comments

Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokens(securityblog.omegapoint.se)

91 points by pontushanssen 2 years ago | 12 comments

Why is OAuth still hard in 2023?(nango.dev)

530 points by bastienbeurier 3 years ago | 255 comments

Nango blog post explaining why implementing OAuth across the 50 most popular APIs remains messy and inconsistent in 2023.

Omarchy: Any User Process Can Escalate to Root(0xcc.io)

471 points by trap0xcc 1 month ago | 451 comments

Blog post describing a flaw in Omarchy's default Docker configuration that let any desktop user process escalate to root without a password; fixed in 4.0.1.