4 ms·
God I hate having to defend Facebook in any way shape or form, but this is the right call. Not only is this company sort of suspicious looking at it, but as ano
by fzeroracer 4y ago
God I hate having to defend Facebook in any way shape or form, but this is the right call. Not only is this company sort of suspicious looking at it, but as another user brought up they don't even have a privacy policy. I have no clue what the extent of data or permissions their app has once you sign in as a user.
This is a PR nightmare waiting to happen because they're siphoning data using a reverse engineered API. You could argue 'what's the worst that could happen' but if they're inserting themselves into the middle of that process, they can effectively behave as that user and request anything they wanted as that user.
OAuth exists for a reason and it's to ensure that users are made aware of what exactly an app is requesting on behalf of them and so that full chain can be properly tracked. If you really want to argue that third party clients should be allowed then it should be from the standpoint of forcing companies to offer something along those lines, not this. People defending this app is horrifying from a security standpoint.