This time it is oAuth and OpenID

Following in the steps of the OpenSSL vulnerability Heartbleed, another major flaw has been found in popular open-source security software. This time, the holes have been found in the log-in tools OAuth and OpenID, used by many websites and tech titans including Google, Facebook, Microsoft, and LinkedIn, among others.

Full article here: http://www.cnet.com/news/serious-security-flaw-in-oauth-and-openid-discovered/?ttag=fbwl

Thanx GG. I think we are going to read a lot more of these type of msgs in the near future..

I don't know why these are such a big deal. Anyone that knows anything will tell you that Internet Security is about as secure as Military Intelligence is smart....

Of course, I have disabled my Facebook connect until Deano tells me it's safe to use again....

LOL. Not something i can fix. If the problem is in oauth, then facebook and all the others need to fix it.

Not something i am worried about. I will just keep running all of mine.

The person that gets hit will be the one who falls for going to a spoofed site anyway.

Yes, but one problem will be they will be blaming you, blaming your site, when the real blame lies on FaceSucks.