News for hackers. Stuff that matters.

A comment on Is It Stupid to Trust Twitter Apps With Your Password?. Parent comment

Re:Is It Stupid to Trust Twitter Apps With Your Password? by tptacek on Friday January 02, 2009 @03:09PM (#417629)
The better alternative is to use random passwords (from a bookmarklet, for instance) so that you'll have no psychological resistance to changing it to ditch a crappy service.
[ Parent | on HN ]
Re:Is It Stupid to Trust Twitter Apps With Your Password? by spoondan on Friday January 02, 2009 @06:01PM (#417877)
The only problem with this approach is that you cannot de-provision individual bad actors. It's an all or nothing approach. There's a lot of work involved in re-provisioning the good guys, and where there's work, there's psychological resistance.
[ Parent | on HN ]
Re:Is It Stupid to Trust Twitter Apps With Your Password? by bprater on Friday January 02, 2009 @04:56PM (#417770)
Agreed. It should be obvious from Twitter by now that folks like building services. It would take a few days of engineering to create "temporary" logins these services could use.
[ Parent | on HN ]
Re:Is It Stupid to Trust Twitter Apps With Your Password? by wmf on Friday January 02, 2009 @05:54PM (#417870)
What about a meta-app that handles changing your Twitter password at all these other apps? :-)
[ Parent | on HN ]