4 ms·
A single lost access token + the API is an easy way to get everything too. It doesn't take much code to get everything that way.
by driverdan 8y ago
A single lost access token + the API is an easy way to get everything too. It doesn't take much code to get everything that way.
- 3pt14159 8y agoWell then I want that to be locked down too! I'm sick of the all-or-nothingness of many of these security measures.
- zrail 8y agoReally the lesson is to use constrained API tokens, going so far as to make single-purpose users as necessary.
- SmellyGeekBoy 8y agoThen don't create an API token with full access?