News for hackers. Stuff that matters.

A comment on An update on our security incident. Parent comment

Re:An update on our security incident by onefuncman on Friday July 31, 2020 @04:26AM (#24006797)
it's not copying the cookie, but there are absolutely third party UIs via a user's API key, it's not a huge leap of faith to assume Twitter has similar internally.
[ Parent | on HN ]
Re:An update on our security incident by Thorrez on Friday July 31, 2020 @04:44AM (#24006882)
A tool that allows an employee to access a user's API key? That sounds like a bad idea, especially if that tool is accessible to support personnel.
[ Parent | on HN ]