Guidance to developers affected by effort to block less secure browsers, apps

Re:Guidance to developers affected by effort to block less s... by scrollaway on Sunday November 22, 2020 @09:56AM (#25177897)

And if your password gets reset by the system and not you, same story.

What makes you say oauth tokens are any less robust? Aside from the fact they usually have an expiration attached to them, there's not much difference.

[ Parent | on HN ]

Re:Guidance to developers affected by effort to block less s... by joshspankit on Sunday November 22, 2020 @10:46AM (#25178341)

Also fair point.

What makes me say that? Experience.

However, I will say to counter my own point: it’s not all roses. Using password by necessity means that your password is now stored somewhere that is likely more easily compromised (In my case: secure passwords are stored in 1Password, but passwords for script usage are either stored in an ENV or in the script itself, neither of which are great from a security standpoint)

[ Parent | on HN ]