3 ms·
But the twitter web interface has access to post (since you can post via it), so it would be possible.
by SahAssar 6y ago
But the twitter web interface has access to post (since you can post via it), so it would be possible.
- madeofpalk 6y agoThe Twitter web interface doesnt - it's just a javascript app that runs in your browser. To post a tweet, it uses the same public API that all third parties use. To posit that it was an npm vunrebility in the frontend caused this hack implies that anyone can just curl their way into someone elses account.
- lukeramsden 6y agoCompromising the web interface would mean you can steal session tokens.