3 ms·
Only if they both stole the consumer token and were able to phish the user into going through the authorization flow.
by abraham 16y ago
Only if they both stole the consumer token and were able to phish the user into going through the authorization flow.
- tptacek 16y agoThe dev that posts OAuth secrets in support tickets also probably hasn't constructed a fortress of awesomeness around his own user's data, anyways.