3 ms·
This is an interesting point. Right now, I can't reconcile the "we canceled active sessions thus logging people out" as a fix with the fact that "View As" was
by IvyMike 8y ago
This is an interesting point. Right now, I can't reconcile the "we canceled active sessions thus logging people out" as a fix with the fact that "View As" was the attack vector.
- rstupek 8y agoIt's likely the fix required the kill active sessions which cause new keys to be generated on sign in
- leddt 8y agoI'm guessing they invalidated all access tokens for accounts that have been used as "View As" targets since the issue was introduced. They also disabled "View As" which is the actual fix for the time being.