Twitter Security Issue

Re:Twitter Security Issue by tlrobinson on Sunday November 23, 2008 @08:45PM (#374337)

I suspect this is actually a very common issue. Unless you explicitly expire all sessions for a user when they change their password then this will happen.

[ Parent | on HN ]

Re:Twitter Security Issue by kajecounterhack on Monday November 24, 2008 @05:44AM (#374667)

Well when you say common, do you mean with another application that utilizes an open API that is connected to many popular platforms and that is as widely used as Twitter?

Not many come to mind.

[ Parent | on HN ]

Re:Twitter Security Issue by tlrobinson on Monday November 24, 2008 @12:54PM (#375084)

I would guess that it's true for many APIs which rely on the user providing their password to the 3rd party application.

Of course that's the bigger problem. The user shouldn't have to give their password out. It's somewhat ironic that Twitter doesn't implement OAuth or something similar since Blaine Cook started OAuth.

[ Parent | on HN ]

Re:Twitter Security Issue by bretthoerner on Sunday November 23, 2008 @09:07PM (#374353)

Common? Maybe.

Good? No.

[ Parent | on HN ]