A security researcher told me to close my OAuth registration endpoint. I said no.
This story is from 2026-09-26. It is preserved in the archive; the latest stories are on the live feed.
Last week I got an unsolicited security report about my QR code service. It was polite, it was accurate about the facts, and both of its headline recommendations would have broken the product. I want to walk through it, because "the report was right and the fix was wrong" is a situation you will hi…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-09-26 17:30 · DEV Community — AI
A security researcher told me to close my OAuth registration endpoint. I said no.