Wednesday, May 7, 2014

4Chan Launches Bug Bounty Program

In late April, Chris Poole, aka moot, the founder of 4chan, announced that the image-based bulletin board had suffered a data breach. To prevent future incidents, the company has not only implemented additional security measures, but it has also launched a bug bounty program.

Tuesday, May 6, 2014

Google cooperating with NSA?

National Security Agency head and Internet giant’s executives have coordinated through high-level policy discussions

Dropbox told about vulnerability in November 2013

Dropbox was contacted yesterday by the media, investigating the claims being made by Intralinks – a file sharing and collaboration service for enterprises – after it revealed that it had stumbled across individuals’ mortgage applications and income tax returns

Friday, May 2, 2014

Serious security flaw in OAuth and OpenID discovered

serious vulnerability "Covert Redirect" flaw can masquerade as a login popup based on an affected site's domain. Covert Redirect is based on a well-known exploit parameter.