3 ms·
Twitter clients stay signed in with pre-breach passwords
- tommorris 14y agoThey aren't signed in with "pre-breach passwords". They are signed in with OAuth tokens. Not tying the authentication of third-party apps to passwords but instead to OAuth tokens is sensible precisely because of security failures like this.