Hi Melissa,

That is how I look at OAuth.


I just spent  a few days working on some code to work with AWS S3.

Which basically does a simple PUT request using a HMAC SHA signature.

This way AWS trust the request is coming in from who they think it is at lets it in.



While working on this I started to notice my development server was getting hit on from far off lands.

Woke me back up that yes, any open port is a door that some one is going to try and knock on.

Regardless if if there might not be anything there for them.


So the topic idea of security is still pretty broad and It could make a good meeting.

If we all can narrow it down to what the group might be most interested in and who else might be able to talk about it.


-Kevin




On May 21, 2011, at 4:29 PM, Melissa Rice wrote:

KL> Is there any interest from the group to do a meeting on security?

Sounds interesting, but I would also be interested in the related issue of trust.

Best regards,

Melissa
-----
Dr. Melissa Rice, PhD
Full Moon Technical Solutions, LLC
14202 60th Ave, NW
Stanwood, WA 98292-4808
email: mailto:[email protected]
phone: 360-654-0709
cell: 425-923-7713


Saturday, May 21, 2011, 4:13:07 PM, Kevin LaTona <[email protected]> wrote:

KL> Hi All,

KL> Is there any interest from the group to do a meeting on security?

KL> I have a friend who works for AT+T on security issues around OAuth but
KL> he does not do Python.

KL> Do we have anybody on the list that is into security in general and
KL> could also talk at such a meeting?


KL> -Kevin

Reply via email to