News for hackers. Stuff that matters.

A comment on My Google Traffic Has Fallen to Zero. Parent comment

Re:My Google Traffic Has Fallen to Zero by inetknght on Tuesday January 05, 2021 @01:25AM (#25642757)
What does it being a token have to do with anything?

An unencrypted token is just as vulnerable as an unencrypted password.

[ Parent | on HN ]
Re:My Google Traffic Has Fallen to Zero by freemonster on Tuesday January 05, 2021 @02:40AM (#25643155)
Tokens have defined scope and expire, so not the same as a password that doesn’t have these limitations.
[ Parent | on HN ]
Re:My Google Traffic Has Fallen to Zero by inetknght on Tuesday January 05, 2021 @09:02AM (#25645565)
If the stream is encrypted that's great. The token is likely to expire before the stream could be decrypted.

But if the stream isn't encrypted then it doesn't matter. A robot can easily collect the token and utilize it before the token expires.

[ Parent | on HN ]