Comments on: OpenID security CSS overlays http://www.thespanner.co.uk/2007/09/28/openid-security-css-overlays/ A tool for designers dealing with programmers dealing with designers... Tue, 14 Oct 2008 01:42:13 +0000 http://wordpress.org/?v=2.6.2 By: Gareth Heyes http://www.thespanner.co.uk/2007/09/28/openid-security-css-overlays/#comment-820 Gareth Heyes Tue, 13 Nov 2007 11:30:16 +0000 http://www.thespanner.co.uk/2007/09/28/openid-security-css-overlays/#comment-820 @Joseph Yeah good point but I also think the information is a security problem, for example the attacker hacks the OpenID account and now has their username and password as well as known IP addresses of the user. @Joseph

Yeah good point but I also think the information is a security problem, for example the attacker hacks the OpenID account and now has their username and password as well as known IP addresses of the user.

]]> By: Joseph Wilk http://www.thespanner.co.uk/2007/09/28/openid-security-css-overlays/#comment-819 Joseph Wilk Tue, 13 Nov 2007 10:43:43 +0000 http://www.thespanner.co.uk/2007/09/28/openid-security-css-overlays/#comment-819 Thanks for the informative information. I've have found this site very usual in my integration of OpenID. I thought I would contribute something I have learnt about Verisign. I have noticed that Verisign allows users to delete the records of logging in history. Hence if someone where to break an OpenID login they could cover there tracks and hide any signs of an attempted breach. Looking at MyOpenID they have the history read-only. Thanks for the informative information. I’ve have found this site very usual in my integration of OpenID.

I thought I would contribute something I have learnt about Verisign.

I have noticed that Verisign allows users to delete the records of logging in history.

Hence if someone where to break an OpenID login they could cover there tracks and hide any signs of an attempted breach.

Looking at MyOpenID they have the history read-only.

]]> By: Gareth Heyes http://www.thespanner.co.uk/2007/09/28/openid-security-css-overlays/#comment-710 Gareth Heyes Tue, 16 Oct 2007 20:33:30 +0000 http://www.thespanner.co.uk/2007/09/28/openid-security-css-overlays/#comment-710 The POC requires the following details:- username : openidtester password : openidtester You need to login to the Verisign service before executing the POC. *NOTE* The trusted sites should be deleted in your Verisign account for the POC to display correctly. I would make this easier but I don't currently have time to modify the poc. The POC requires the following details:-
username : openidtester
password : openidtester

You need to login to the Verisign service before executing the POC.

*NOTE* The trusted sites should be deleted in your Verisign account for the POC to display correctly. I would make this easier but I don’t currently have time to modify the poc.

]]>