Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

A security researcher told me to close my OAuth registration endpoint. I said no.

Last week I got an unsolicited security report about my QR code service. It was polite, it was accurate about the facts, and both of its headline recommendations would have broken the product.

  • Security researcher advised against OAuth endpoint changes
  • Proposed changes would disable dynamic registration functionality
  • Implemented three safeguards to protect service from attacks

More from Saturday 26 September →