Tipjoy is filled up via PayPal, but not tied to your account. You can't pull more money than you already put in there. Tipjoy could be compromised by phishing

Tipjoy is filled up via PayPal, but not tied to your account. You can't pull more money than you already put in there. Tipjoy could be compromised by phishing of either your Twitter or your Tipjoy password. This is equivalent to PayPal. We allow a 3rd party to create a link to sign in a Tipjoy user, which requires a Twitter username & password, and eventually will work with OAuth: http://tipjoy.com/api/#create_login_link http://tipjoy.com/api/#create_login_link This isn't a big deal considering you can just tweet a payment with those same credentials. http://tipjoy.com/api/#creating_twitter_payment http://tipjoy.com/api/#creating_twitter_payment We'll eventually become an OAuth provider, instead of using Twitter credentials.