Scott Brady

I help developers learn OAuth and web security (he/him)

[Scott Brady @scottbrady91]

New Pluralsight course! 🎉 Learn how to use JWTs securely in my latest course: JWT Fundamentals. #pluralsight https://t.co/NBYvngAdGN

[Scott Brady @scottbrady91]

This is my account on Mastodon - https://t.co/tAzlebmXzM - verified by @twittodon_com https://t.co/qlOS567YKN https://t.co/Rq2iRgKzoJ

[Scott Brady @scottbrady91]

@jstanier That’s awesome. Do you know if there will be an (English) audiobook at some point?

[Scott Brady @scottbrady91]

@LindaLawtonDK That all works for .NET 6 🙂

[Felix Krause @KrauseFx]

🔥 New Post: Announcing InAppBrowser - see what JavaScript commands get injected through an in-app browser

👀 TikTok, when opening any website in their app, injects tracking code that can monitor all keystrokes, including passwords, and all taps.

https://t.co/TxN1ezZX71

[Scott Brady @scottbrady91]

Understanding JSON Web Encryption (JWE) - learn about the JWE format, why you need both JWE & JWS, and what encryption algorithms you'll be able to use. https://t.co/fcUgu0YHKF

[Scott Brady @scottbrady91]

@karimkos @pluralsight Thank you 🙂

[Steve Syfuhs @SteveSyfuhs]

Periodic reminder that if your attack requires that you first somehow acquire the secret key to something, you have not in fact created a new attack.

[DDD South West @dddsouthwest]

Let’s stop blaming our users for getting hacked with @scottbrady91

[Scott Brady @scottbrady91]

@dddsouthwest Still need help? My DM's are open if you need a short-notice talk 🙂

[Kelly Shortridge @swagitda_]

CamperBob2 on HN is the hero we deserve. Don’t mistake Rule of Cool for likelihood.

(also, love to see the “Security Theater” barb enter common parlance... we used it in the Security Chaos Engineering book to label traditional infosec and it ruffled feathers (the truth hurts))

[Pamela Dingle @pamelarosiedee]

https://t.co/kkkE2NBmvj - a one-stop list of RFC numbers, nicknames and links to OAuth 2.0 specifications. Quick to scroll and an easy to remember resource for beginners! Good for presentations and for pretending your memory is perfect when making comments at @secworkshop #osw7

[Scott Brady @scottbrady91]

@mrjohndye @quorralyne Thanks, John. Great to hear I was one of the good ones! 🙂

[OpenID @openid]

The OpenID Foundation is excited to announce the 2022 Kim Cameron Scholarship. Learn more about the opportunity to receive a scholarship to @eic_conference or @Identiverse including the submission process and deadlines here:
https://t.co/tXLYHuxBpG #oidf

[Scott Brady @scottbrady91]

Step-up authentication with OAuth and OpenID Connect: how to trigger step-up authentication using open standards https://t.co/lxC7eiEPew

[Scott Brady @scottbrady91]

@mhamann No worries. Happy to help 🙂

[Scott Brady @scottbrady91]

@mhamann Verification would be the same process but you would be loading the key differently. Here’s an example I found in one of my unit tests. Public key would be the x value from the JWK. https://t.co/TG6x5hDfIj

[Scott Brady @scottbrady91]

@r3hcra Yeah, but Dune.

[Songs // ᔑamples @songsandsamples]

Rhinestone Cowboy by Madvillain (2004)
https://t.co/sFwkmn5geK