FIDO2貫通事案なぁ.....(ガチのWebauthnの不良だとしたらGoogle先生がかなりヤバイ。そして億単位の価値がある。)

If you’re using the WordPress plugin, WP-WebAuthn …. #infosechttps://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-webauthn/wp-webauthn-131-authenticated-contributor-stored-cross-site-scripting-via-wwa-login-form-shortcode

見てる: "Safari 18で Automatic Passkey Upgrades をやってみた" https://zenn.dev/gebo/articles/webauthn-safari18-passkey-upgrades

ID: CVE-2024-9023 CVSS V3.1: MEDIUM The WP-WebAuthn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wwa_login_form shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on... #security#infosec#cve-alert

これに気をつけながらパスキーとWebAuthnを設定したから後は問題ない

2/ Criteria: FIDO/WebAuthn MFA or at absolute minimum OATH TOTP cost effective: I do like Intermedia Unite but it’s $27.99 per line. But if I end up monetizing my content better totally comfortable getting them.

1/ Trying to find a VoIP provider other than Google that can work with apps that don’t allow Google Voice. I want something much more secure than cell phones for SMS MFA for things that still require it when I can’t use FIDO/WebAuthn Or at least OATH TOTP

Trying to find a VoIP provider other than Google that can work with apps that don’t allow Google Voice. I want something much more secure than cell phones for SMS MFA for things that still require it when I can’t use FIDO/WebAuthn Or at least OATH TOTP Criteria: FIDO/WebAuthn MFA or at […]

The phpMyFAQ Team is pleased to announce phpMyFAQ 4.0.0-beta.2, the "Tito Jackson" release. This release adds an experimental support for WebAuthn, a new layout, and we fixed all reported issues. Download: www.phpmyfaq.de/download

phpMyFAQ - Downloads

phpMyFAQ downloads for the current stable and development versions.

Blink: Intent to Ship: WebAuthn signal API