3 ms·
I don’t see account access being abused either. People could already be giving out their credentials, but somehow it’s not happening, so I don’t see the argumen
by Rjevski 8y ago
I don’t see account access being abused either. People could already be giving out their credentials, but somehow it’s not happening, so I don’t see the argument against personal access tokens.
- Nursie 8y ago> People could already be giving out their credentials, but somehow it’s not happening, It is, people often get scammed into giving access to their accounts. Having more locked-down APIs is a way to move off from this.
- Rjevski 8y agoThey are not using APIs to begin with. I'm not sure what else is there to lock down. Maybe we should just let idiots be idiots, and natural selection (or in this case, financial selection?) do its thing and the problem will go away eventually?
- Nursie 8y ago> They are not using APIs to begin with. I'm not sure what else is there to lock down. It's a bit like getting your app from the app store, or system repository, rather than downloading a random exe from the internet. Apple's walled garden comes in for a lot of criticism, but it does stop a lot of crap getting through. Getting your PSD2 enabled, regulated app from a curated list rather than any random piece of crapware is the same sort of idea. > Maybe we should just let idiots be idiots... Eh, if that was going to work it would have done by now. They'll only become a burden on the state.