Authress HQ

@AuthressHQ

Authorization as service. If Identity is the Key then Authress is the Lock. Join the community: authress.io/community

Switzerland

authress.io

Joined May 2020

Following

Followers

Replies Reposts Media

Authress HQ
@AuthressHQ
Aug 13, 2022
Don't leave your app security up to chance. @AuthressHQ ensures generation of unique signature keys for every client and service.
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Authress HQ
@AuthressHQ
Jan 24, 2022
Here's a reminder: Legacy systems ARE security vulnerabilities. Especially ones using PHP, XML, RPC. Remember to migrate ALL systems to using @AuthressHQ and not just your cutting edge ones. A recent find by @OTPHolidays reminds us of this: openbugbounty.org/reports/180701…
Authress HQ
@AuthressHQ
Oct 24, 2021
Accurate time servers are critical for validating security token lifetimes. This is a security relevant threat.
Cybersecurity and Infrastructure Security Agency
@CISAgov
Oct 22, 2021
CURRENT ACTIVIY: On October 24, 2021, Network Time Protocol servers using bugged GPSD versions 3.20-3.22 may rollback the date 1,024 weeks—to March 2002—which may cause systems and services to become unavailable or unresponsive. Learn more: bit.ly/30IR0s1
Authress HQ
@AuthressHQ
Oct 19, 2021
@AuthressHQ is proud to NOT be on this list: sso.tax
Authress HQ
@AuthressHQ
Sep 2, 2021
We don't allow malicious actors to discover our customers IAM principals and roles because retrieving that information requires at least knowledge level access permissions.
Luc van Donkersgoed
@donkersgood
Sep 1, 2021
I recently found a new enumeration vulnerability in AWS. It allows me to identify valid account IDs and any IAM principal in it. I had a call with AWS security, and they say it’s by design. Well then, let’s take a look!