News for hackers. Stuff that matters.
Re:Is It Stupid to Trust Twitter Apps With Your Password? by wmf on Friday January 02, 2009 @03:02PM (#417619)
The only alternative is to not use Twitter apps. Until there's a real alternative (OAuth), people will be giving away their passwords.
Re:Is It Stupid to Trust Twitter Apps With Your Password? by tptacek on Friday January 02, 2009 @03:09PM (#417629)
The better alternative is to use random passwords (from a bookmarklet, for instance) so that you'll have no psychological resistance to changing it to ditch a crappy service.
Re:Is It Stupid to Trust Twitter Apps With Your Password? by spoondan on Friday January 02, 2009 @06:01PM (#417877)
The only problem with this approach is that you cannot de-provision individual bad actors. It's an all or nothing approach. There's a lot of work involved in re-provisioning the good guys, and where there's work, there's psychological resistance.
Re:Is It Stupid to Trust Twitter Apps With Your Password? by bprater on Friday January 02, 2009 @04:56PM (#417770)
Agreed. It should be obvious from Twitter by now that folks like building services. It would take a few days of engineering to create "temporary" logins these services could use.
Re:Is It Stupid to Trust Twitter Apps With Your Password? by wmf on Friday January 02, 2009 @05:54PM (#417870)
What about a meta-app that handles changing your Twitter password at all these other apps? :-)