Featured articles
Archive
Category: Security
OpenID Certification Program Wins the 2018 EIC Award
Munich, May 17 — The OpenID Certification Program, a tool for verifying whether implementations of OpenID Connect conform to the specification, has received the “Best Innovation Aw…
Who Owns the Data? — European Identity Conference 2018 Featured Session
On April 13, at 9:55 p.m., I suddenly decided to send an email titled “Facebook, mydata, and Self Sovereign Identity” to Martin Kuppinger and Joerg Resch of Kuppinger Cole. Actuall…
UK Government to Fine Critical Organizations £17 million for Inadequate Cybersecurity Measures
In a press release dated January 28, 2018, , the UK government announced that companies and organizations responsible for critical infrastructure could face fines of up to £17 mill…
Future-Proofing OAuth Security—OAuth Security Workshop 2017
OAuth Security Workshop 2017, where I gave a presentation. (2017/7/14) Since Professor Basin (ETH Zurich) and Professor Cremers (University of Oxford) were both going to be there,…
The Lesson of WannaCry: It Is Time to Stop Thinking of Software as a Product You Purchase
An article from the Nikkei newspaper titled “Cyberattack That Was Bound to Happen After Warnings Were Ignored” came across my feed. It contains the following passage. Of cou…
Another Way to Use “Named” Tokens with OAuth
It has been a while, everyone. Every year on April 1, I try to write a joke specification that might actually be useful, but once again I did not manage to write one this year. Bef…
Financial API — Part 1: Read Only Security Profile Is Undergoing Final Review Before the Implementer’s Draft Vote
The “Financial API — Part 1: Read Only Security Profile”, which is being developed by the OpenID Foundation’s Financial API WG (FAPI WG), is undergoing final review bef…
I Will Speak at API Days Paris on “Financial Grade OAuth and OpenID Connect”
“Automating IT, Business and Society as a Whole with APIs” is the catchphrase of the 1200-person conference “API Days 2016”, which will be held on December 13 and 14 at Tapis Rouge…
CODE BLUE and Cosplay Companions
There is a conference called CODE BLUE. According to the organizer, it is “an international information-security conference originating in Japan, featuring world-class security exp…
Data Breaches Up 15% and Number of Records Up 31%; 1/3 from Healthcare (Gemalto Report)
Gemalto has published its Breach Level Index report. According to the report, data breaches in the first half of 2016 showed the following: Compared with the previous 6 months, bre…
You must be logged in to post a comment.