API Security Flaws Found In Booking.com Point To A Larger Problem | Yaniv Balmas, Salt Security
Channel: TFiR
Date: 2023-03-30

Guest: Yaniv Balmas
Company: Salt Security (https://salt.security/)
Many websites have a social login functionality that allows users to log in using their Google, Facebook, Twitter, or other accounts. It provides the convenience of not having to enter a username and password. In this episode of TFiR: Let’s Talk, Swapnil Bhartiya sits down with Yaniv Balmas, VP of Research at Salt Security, to talk about the API security flaws that were found in the implementation of the Open Authorization (OAuth) social-login functionality utilized by Booking.com, and why it is a symptom of a bigger issue.