2 ms·
Them using a trial version is not a myth; that is from the official Okta Twitter account. My understanding of the scraped data is that some APIs used both sequ
by ashtonkem 6y ago
Them using a trial version is not a myth; that is from the official Okta Twitter account.
My understanding of the scraped data is that some APIs used both sequential keys, and ignored both permissions and their soft delete flag. It’s not clear to me whether or not that API was permanently unauthenticated, or if it failed open once Okta locked them out.
- duskwuff 6y agoThat API was effectively public by design. It's the same API that anyone using the Parler mobile app would have been accessing.
- tptacek 6y agoThat API --- their most obvious, public API --- appears to have done no authz, despite using sequential identifiers. There are private feeds on Parler. That's clownish. I don't understand why anyone would trust them going forwards.
- ashtonkem 6y agoI don’t understand either, but lots of people appear to be doing lots of things I don’t understand. So I’m going to assume that people will continue us to trust them going forward, even if I think they shouldn’t.
- tptacek 6y agoI don't know what the pill color for this is, but, like, welcome to the desert of the real and all that.