Techmeme: OAuth, OpenID security flaw can be exploited to steal personal info, redirect users to unsafe sites (CNET News)

Open Links In New Tab

Mobile Archives Advertise Site News Contact Editors

May 2, 2014, 2:30 PM

Top News

John Paczkowski / Re/code:

Apple won't introduce wearables or a new Apple TV at this year's WWDC — Code/red: No New Apple TV at WWDC — // HAPPENING TODAY — More NewFronts! Today's expected highlight: Vice and its frontman, Shane Smith. — German chancellor and NSA surveillance target Angela Merkel is meeting with U.S. President Barack Obama.

More: 9to5Mac, BGR, MacRumors, iMore, Business Insider, Cult of Mac, App Advice, The Verge, iPhone in Canada Blog, Guardian, TechNewsWorld, TechnoBuffalo, Redmond Pie, Phones Review and Gigaom. Tweets: @markgurman

New York Times:

White House report on Big Data calls for limits on online data collection by tech companies — Call for Limits on Web Data of Customers — WASHINGTON — The White House, hoping to move the national debate over privacy beyond the National Security Agency's surveillance activities …

More: PandoDaily, Engadget and TechPresident

Tweets: @anamariecox, @sangernyt and @stevelohr

David Kravets / Ars Technica:

Obama panel supports warrant requirement for e-mail, cloud content

More: White House.gov Blog, SiliconBeat, ZDNet, Computerworld, TechCrunch, VentureBeat, Bloomberg, Softpedia News, CNET News, RT and Guardian

CNET News:

OAuth, OpenID security flaw can be exploited to steal personal info, redirect users to unsafe sites — Serious security flaw in OAuth and OpenID discovered — Malicious attackers can use the ‘Covert Redirect’ vulnerability in the OAuth 2. and OpenID open-source login systems to steal …

More: Tetraph, BGR, Inquirer, Lifehacker, Neowin, Electronista, Mashable, Engadget and Cult of Mac

Tweets: @theromit, @shaver, @maximus_freeman, @stevewerby, @chriseng, @kimzetter and @migueldeicaza

Craig Timberg / Washington Post:

Apple, Facebook, others defy authorities, notify users of secret data demands — Major U.S. technology companies have largely ended the practice of quietly complying with investigators' demands for e-mail records and other online data, saying that users have a right to know in advance …

Mark Gurman / 9to5Mac:

Angela Ahrendts officially starts role as Apple's new Senior VP of Retail and Online Stores — Angela Ahrendts has officially taken the reins of Apple's new Senior Vice President of Retail and Online Stores. Ahrendts's last day as the CEO of Burberry was yesterday, and Apple's website …

More: Fortune, Daring Fireball, iPhone, PadGadget, Cult of Mac, Business Insider, iMore, iDownloadBlog.com, AppleInsider, The Mac Observer, MacRumors and MacDailyNews. Tweets: @jeffweiner

Electronic Frontier Foundation:

EFF releases Privacy Badger browser extension that blocks third-party trackers for Chrome and Firefox — Help EFF Test Privacy Badger, Our New Tool to Stop Creepy Online Tracking — EFF is launching a new extension for Firefox and Chrome called Privacy Badger.

More: Electronic Frontier Foundation, Slate, VentureBeat, Computerworld, Ars Technica, Lifehacker, Softpedia News, The Next Web, gHacks Technology News and Inquirer

GSMArena.com:

New LG G3 photo leaks, specs detailed: 5.5" 534 ppi QHD display, 13MP camera with OIS+ image stabilization — Exclusive: LG G3 specs detailed as new photo surfaces — With the official announcement fast approaching, LG is having an increasing hard time keeping its upcoming flagship under wraps.

More: Business Insider, 9to5Google, Unwired View, Android Authority and Gotta Be Mobile

Chad Buenaflor / The Droid Guy:

Cooliris Launches New Gallery App for Android Devices — If you own an Android device then you might not know it but the Gallery app used as the default photo browser in your device is made by Cooliris. Today, the company has introduced a new alternative gallery app for Android devices …

More: The Next Web and Consumer Electronics Net

Chris O'Brien / Los Angeles Times:

Activists sue San Francisco to stop shuttles of Facebook, Apple, and Google from using public bus stops — Activists sue San Francisco over ‘Google buses’ — A shuttle to the Google campus loads passengers in San Francisco. (Liz Hafalia / San Francisco Chronicle / October 23, 2012)

More: Gawker, San Francisco Examiner … and The Verge

Tweets: @peterpham, @emilymbadger and @pmarca

Eric Slivka / MacRumors:

Wild Rumor of Apple EarPods with Biometric Sensors Has Roots in Apple's Research — A seemingly wild rumor of Apple planning to launch new EarPods headphones with integrated heart rate and blood pressure sensors has been making the rounds today after the claim was posted on anonymous information sharing platform Secret (via Reddit).

Juli Clover / MacRumors:

Apple Hiring MIT Researcher With Expertise in Ear-Worn Vital Signs Monitor

More: SlashGear, TechnoBuffalo and iPhone Hacks

Jeff John Roberts / Gigaom:

Google sued for requiring OEMs to bundle its mobile apps, make search and location services default on Android phones — Google uses secret Android deals for illegal search monopoly, lawsuit claims — Google requires Samsung, HTC and other mobile device makers that use the Android operating system …

More: Re/code, CNET News, Reuters, The Register, ITworld.com, FierceMobileIT News, Geek.com, PC World, AppleInsider, Android Authority, BGR, MobileBurn.com, Inquirer, 9to5Google, Bloomberg, Wall Street Journal and AndroidHeadlines.com

Tweets: @amir and @brisbourne

Caroline Moss / Business Insider:

High school teacher says new Snapchat update disrupted her class, had to take all phones away, students were in “near panic” — High-school teacher: In 16 Years Of Teaching, Nothing Has Disrupted My Classroom More Than Snapchat's New Update — Yesterday, Snapchat released a huge update, its biggest in months.

More: The Verge, SiliconBeat, Valleywag and New York Magazine

Tweets: @bravesearth, @marcsettle, @mdudas and @markgurman

Jordan Golson / MacRumors:

iTunes Match Expands to Japan — Apple is expanding its iTunes Match service to Japan, according to a MacRumors tipster and the company's iTunes Match availability website. The service, which costs ¥3,980 per year, allows iTunes users to match their existing iTunes libraries …

More: AppleInsider, App Advice, MacNN, TUAW, The Next Web, 9to5Mac and iMore

Sponsor Posts

Subquadratic:

Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens.

Cloudflare:

Cloudflare Connect 2026: The Agentic Conference — Stop preparing for agents. Start running them. 100+ sessions, workshops, and speakers from OpenAI, Arm, and Cloudflare across AI, security, and performance.

Zoho:

Zoho Sign takes a bite of Apple's latest: iOS 27, iPadOS 27, and macOS Golden Gate — It's September, and you know the drill. Apple just handed us a fresh batch of releases, and there's plenty to look forward …

IDrive:

Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Sponsor Techmeme

Featured Podcasts

Channels with Peter Kafka:

AI Wants to Shop for You. What Could Go Wrong?

Media and tech aren't just intersecting - they're fully intertwined. To understand how those worlds work, Peter Kafka talks to industry leaders, upstarts and observers.

Subscribe to Channels with Peter Kafka.

Invest Like the Best:

Michael Moritz - Lessons From 40 Years of Investing and Writing

The leading destination to learn about business and investing. We do this by showcasing exceptional talent and ideas.

Subscribe to Invest Like the Best.

Sources:

Baseten's CEO on why every company will want to own its AI

Candid conversations with the leaders shaping what's next in AI and the broader tech industry. Hosted by Alex Heath, who has covered Silicon Valley for more than a decade.

Subscribe to Sources.

Training Data:

Box's Aaron Levie: On Reinventing Yourself in the AI Age and Enterprise Diffusion

Sequoia Capital partners host conversations with leading AI builders and researchers to develop a deeper understanding of the evolving technologies and their implications.

Subscribe to Training Data.

Uncapped with Jack Altman:

Andrew Feldman from Cerebras

Conversations with people I admire about things I'm genuinely interested in.

Subscribe to Uncapped with Jack Altman.

Acquired:

The Home Depot

Learn the playbooks that built the world's greatest companies - and how you can apply them as a founder, operator, or investor.

Subscribe to Acquired.

Add your podcast here

About This Page

This is a Techmeme archive page. It shows how the site appeared at 2:30 PM ET, May 2, 2014.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.