Search issues, trackers, people, glossary, and more
The archive
Every documented issue, searchable and filterable by category, year, and keyword. Toggle between grid and timeline views, and export the filtered set to CSV.
A security researcher earned a $10,000 Reddit bug bounty for an OAuth flaw in Reddit's 'Sign in with Apple' flow that let an attacker hijack the account of any user who used Apple sign-in with a single click, by abusing the OAuth state parameter to steal the victim's authorization code.