nayaread
HomeFavouritesTopicsSources
HomeFavouritesTopicsSources
NayaRead links to original engineering blogs. All copyright belongs to the respective authors.
The GitHub Blog·Mar 12, 2025·21 min read·Peter Stöckli63

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials

Critical authentication bypass vulnerabilities were discovered in ruby-saml up to version 1.17.0. See how they were uncovered.

Security
Read original on github.blog

Discussion around the web

  • Hacker News312 · 124 💬

Score breakdown

  • Technical depth85
  • Practical value60
  • Originality85
  • Writing quality82
  • Source reputation85
  • Recency0
  • External engagement35
  • On-site engagement0

NayaRead shows a summary and links to the original article. The full article is hosted on github.blog.

More like this

Shopify Engineering

How to Implement a Secure Central Authentication Service in Six Steps - Shopify

Dec 26, 2019·14 min read
Shopify Engineering

Supporting Passkeys in Shop's Authentication Flows - Shopify

Mar 24, 2023·8 min read
The Cloudflare Blog

Keyless SSL: The Nitty Gritty Technical Details

Sep 19, 2014·26 min read
The Cloudflare Blog

Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH

Mar 25, 2025·15 min read