5 ms·
It doesn't ask for your password--Twitter does. It's using OAuth, not the password anti-pattern.
by bruceboughton 17y ago
It doesn't ask for your password--Twitter does. It's using OAuth, not the password anti-pattern.
- Tichy 17y agoWith OAuth it can still access my account.
- bruceboughton 17y agoYes, it can, but it's not the same as giving your password away. 1. you can revoke access throught the Twitter settings. 2. if you use the same password for, say, you're Google account, using OAuth stops this password being revealed to the developer, so they can't access, say, your Google Payments account There's a big difference between giving the site unrestricted access to your Twitter account and giving it unrestricted access to all your accounts (if they use the same password). Let's not pretend there isn't a difference here. Anyway, the site is reasonably descriptive about the functions it offers before sending you through the OAuth process.
- prawn 17y agoIf the permission granted allows it to post something to my feed, that's enough of a deterrent to me. Reasonably descriptive? Was there something I missed on the two pages prior to the login request? I counted about three brief lines of text and one of them wasn't descriptive at all. Edit: Please note that when it was first posted to HN and when I viewed the site, there was no screenshot and no bullets. It was just two lines of text that didn't really explain things very well.