All your Facebook Access Tokens are belong to us

Re:All your Facebook Access Tokens are belong to us by zaidf on Tuesday October 29, 2013 @12:17PM (#6635265)

We condemn anyone that stores passwords as plaintext. Time to treat access tokens as nothing less than a password.

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by davidkuridza on Tuesday October 29, 2013 @12:20PM (#6635302)

How would you store access tokens on a device, using two-way encryption or do you have something else in mind?

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by zaidf on Tuesday October 29, 2013 @12:34PM (#6635455)

Two way encryption, yep.

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by colinhowe on Tuesday October 29, 2013 @01:07PM (#6635734)

but then for any reasonable application to be able to use them they'll need to store the unencryption key anyway..

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by tedunangst on Tuesday October 29, 2013 @01:45PM (#6636058)

Obviously you wouldn't store the encryption key in plaintext...

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by paulgb on Tuesday October 29, 2013 @02:32PM (#6636405)

It's encrypted keys all the way down.

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by Zancarius on Tuesday October 29, 2013 @02:53PM (#6636564)

That's easy! We could use two-way encryption to encrypt the encryption key.

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by snarfy on Tuesday October 29, 2013 @01:46PM (#6636076)

What's wrong with 'correct horse battery staple'?

[ Parent | on HN ]