SS-Oh No! by Gal Bitensky
Reviews SS-Oh No! by Gal Bitensky and evaluates key implications for security practitioners.
Summary
BSidesTLV 2022 lightning talk by Gal Bitensky on bad SSO login page implementations. Covers common misconfigurations and information exposure on public SSO portals, recommending mutual TLS for device onboarding and warning against pre-authentication asset enumeration and exposing internal hostnames.
Related talks
BalCCon - Balkan Computer Congress·50 min
La Casa de Papel
Reviews balCCon2k23 - Dr. G and evaluates key implications for security practitioners.
BalCCon - Balkan Computer Congress·1 hr 59 min
Demonstrates the Kavers and evaluates key implications for security practitioners.
BalCCon - Balkan Computer Congress·1 hr 5 min
Lock Picking 101 102
Analyzes balCCon2k19 - Zoz and evaluates key implications for security practitioners.