DEF CON 29 - Jenko Hwong - New Phishing Attacks Exploiting OAuth Authentication Flows - LIVE

[@prodbydramatic]

great job on presenting and research Jenko I also hate power point lol

[@thesaddestdude3575]

Its funny i keep getting recomended stuff like this, at the same time i can't even operate my microwave properly.

[@nilsgoroll1877]

great research results, great presentation, Thank You! I wonder if M$ really has _no_ way to invalidate refresh tokens for ordinary users? Could it be true that invalidating them is only possible through their APIs?

[@headmaxify]

I forgot what this presentation was about. Was it phishing or sniffing?

[@thesaddestdude3575]

Why not both? I was once phished while sniffing glue.

[@TheCramik]

Is it just me or did it sound like he got really anxious? Like his voice is all shaky and stuff, poor guy.

[@m000sej00se]

definitely seems like he was nervous.

[@marblemunkey]

"How do you shoot the devil in the back? What if you miss?"

[@JeanQPublique]

I listen to these talks at 1.5x so *everyone* sounds nervous :P

[@TheCramik]

@@JeanQPublique lol

[@prodbydramatic]

@@JeanQPublique haha