3 ms·
you don't need to be using an iOS device for someone to use your devices authentication token to access your account. Sounds like perhaps a a vulnerability leak
by thefreeman 13y ago
you don't need to be using an iOS device for someone to use your devices authentication token to access your account. Sounds like perhaps a a vulnerability leaking oauth tokens in the iOS client?
- girvo 13y agoOr something to do with Twitter's iPhone integration having an issue, allowing someone to create credentials on your behalf.
- s1kx 13y agoI would assume it's just sent through the API with the iOS App's app credentials (they are open and out there). That specific set of app credentials allows the OAuth endpoint for email + password sign in through the API. Maybe some other database got hacked and the user credentials were used on twitter.