4 ms·
very interesting, analyzed 40k+ emails and I didn't find that much I didn't already know. More surprised about what can be seen with just an oauth token.
by cryptokill 13y ago
very interesting, analyzed 40k+ emails and I didn't find that much I didn't already know. More surprised about what can be seen with just an oauth token.
- eterm 13y agoIt's not just any OAuth token it's a token that asks for permissions to "view all your mail" among other things. Most Oauth tokens won't ask for this highly elevated permission. OAuth is not designed around Authentication, the Auth in OAuth is actually about Authorisation. It was designed for this purpose, to authorise others to have access to your mail, or contacts, etc. That it has been co-opted for Authentication purposes (particularly in Oauth2) has just been a side effect.