Collaborate Disseminate
I know there are lots of posts on the same origin policy, but I specifically want to understand why it can’t be done in this simpler way.
If evil.com makes sends a request to bank.com, browsers will not add cookies (so unauthenticated). No… Continue reading A potentially simpler same origin policy?
Okay I asked before but I wasnt specific enough so here is a retry being more specific.
hypothetically speaking say a home internet connection is being monitored by the isp. all data passing thru is being monitored and handed over.
If yo… Continue reading Can connecting to wifi lead to your cellular id being exposed?
can connecting to wifi reveal my cellular identity ?
So what I mean is say hypothetically the powers that be wanted to tap your cellular phone and your home wifi (having the isp monitor all data).
And you buy a new phone with a new simca… Continue reading Does connecting your phone to wifi make it trackable by cellular connection?
OAuth 2.0 used for authentication by Google makes sense given that the server and client both trust Google but not each other.
As I understand the authorization code is passed back to the server (in server side flow) as a U… Continue reading Why can’t the client server speak directly to an identity provider like Facebook in OAauth 2.0