New Phishing Attacks Exploiting OAuth Authentication Flows

No ratings

Presented at DEF CON 29 by

OAuth 2.0 device authorization gives users on limited-input devices like TVs an easier way to authenticate against and authorize a cloud website/app by entering a code on a computer/phone. This authentication and authorization flow leads to new phishing attacks that: