3 ms·
They aren't signed in with "pre-breach passwords". They are signed in with OAuth tokens. Not tying the authentication of third-party apps to passwords but inst
by tommorris 14y ago
They aren't signed in with "pre-breach passwords". They are signed in with OAuth tokens.
Not tying the authentication of third-party apps to passwords but instead to OAuth tokens is sensible precisely because of security failures like this.