3 ms·
How so? What's stopping bad actors from using their official client's secret (found on mobile apps binary)?
by slig 8y ago
How so? What's stopping bad actors from using their official client's secret (found on mobile apps binary)?
- toomuchtodo 8y agoScarcity enforces efficiency. API monitoring stops bad actors; doesn't matter much if you extract the creds from a binary blob if the usage pattern begins to deviate from the norm, invalidating the creds and forcing a creds cycle.
- slig 8y agoInvalidating creds would mean millions of users blocked overnight, which is something they would never do, too much friction for the vast majority of the users.
- toomuchtodo 8y agoWith these changes (limits), you’re not having millions of users. Those days are long gone. API access is now effectively for ancillary or supporting tools.
- arbie 8y agoAre you implying the official client no longer uses their own API?
- toomuchtodo 8y agoI'm implying that non-official consumers of the Twitter API are slowly being relegated to second class citizens. Not knocking it, it makes sense from a platform integrity perspective. It is what it is.