QtNetworkAuth — predicatable seeding of PRNG in QAbstractOAuth
Discription

Andy Shaw reports: The OAuth1 implementation in QtNetworkAuth created nonces using a PRNG that was seeded with a predictable seed. This means that an attacker that can somehow control the time of the first OAuth1 flow of the process has a high chance of predicting the nonce used in said OAuth…Read More

Back to Main

Subscribe for the latest news: