Tootfinder

Another researcher skipped coordinated disclosure entirely and dropped a critical 1-click GitHub token theft in public because he doesn't want to deal with MSRC. In his own words: "I really don't want to deal with MSRC on VSCode bugs."
The bug: just clicking a link can hand an attacker a GitHub token that reads AND writes to all your repos, including private ones. It lives in github[.]dev, GitHub's browser-based VSCode editor, which passes the browser an OAuth tok…

lazypost: Is there a nice way to get oauth tokens from the command line with a tool that starts a special webserver just for the flow and then opening the web browser (with the oauth site you're connecting to then redirecting to localhost/that special webserver) to spit out the bearer token at the end?

A post I wrote about securing an #OpenAPI scheme using Duende IdentityServer gets a decent amount of reads a month (https://duendesoftware.com/blog/202511

Tomorrow! Join Grist Labs co-founder Stan for a demo of Grist's new MCP server.
We'll start small and then show off a complex workflow that leverages multiple integrations, so there's something for everyone.
Connect Claude, ChatGPT, Gemini, or your own local models to your docs over the Model Context Protocol, then list and query tables, read and write rows, and build schema, all via OAuth with scoped access.
Register:

"(not provided)" ist kein Naturgesetz. 🔓
Matomo das Search Engine Keywords Performance Plugin holen echte GSC-Keywords pro Landingpage zurück – direkt in die Analytics-Oberfläche. Self-hosted, consent-gated, keine Datenweitergabe an Google Analytics. Wer wissen will, für welche Begriffe eine URL Klicks bekommt: GSC-OAuth verbinden, fertig.
#SEO

Tomorrow! Join Grist Labs co-founder Stan for a demo of Grist's new MCP server.
We'll start small and then show off a complex workflow that leverages multiple integrations, so there's something for everyone.
Connect Claude, ChatGPT, Gemini, or your own local models to your docs over the Model Context Protocol, then list and query tables, read and write rows, and build schema, all via OAuth with scoped access.
Register: