It's great to see a company's API lead engaging in a discussion like this. I feel like he's missing the point of the critics, though. OAuth may not solve the ph

It's great to see a company's API lead engaging in a discussion like this. I feel like he's missing the point of the critics, though. OAuth may not solve the phishing problem, but it has demonstrable advantages over handing out your passwords: - finer grained levels of access - ability to block one app without blocking the others - ability for Twitter to block an app entirely, across the userbase, if it misbehaves