5 ms·

I'm not giving my username and password to my online accounts to random native or web apps when the service in online account in question provides oAuth.

• bonaldi 16y ago
  and you can verify the embedded-in-a-web-view-with-no-url-bar login page how, exactly?
  • jrockway 16y ago
    By not using iOS. Other mobile operating systems can run more than one application at once, allowing the OAuth sequence to open in a browser you control.
    • bonaldi 16y ago
      iOS can do this too. But most developers use in-app web views to try and make it slightly nicer for their users. It's too late to demand that oAuth always go to the native browser. You use oAuth apps, chances are you're using an embedded view that you're taking on trust.
  • jmillikin 16y ago
    My browser is already signed in to twitter/identica/whatever page is being requested. If the login page appears at all, it means the app is doing something shady.
    • ceejayoz 16y ago
      Twitter always presents a login page, even if you're already logged in.