2 ms·
I feel like this author just discovered OAuth. Starwood is asking for permission to see those things. People "Log in with Facebook" dozens of times a day and
by habosa 12y ago
I feel like this author just discovered OAuth. Starwood is asking for permission to see those things. People "Log in with Facebook" dozens of times a day and Facebook knows a lot more than Uber does.
One interesting thing about this data is that it is also all in Gmail (or whatever email you use) because of ride receipts. So theoretically someone could ask for read access to your email and get all this data and more. It also means Uber is leaking their valuable (?) to every email provider.
- aetherson 12y agoYou say that as though "asking for read access to your email" was a reasonable request that a company might ask for and get. I mean, who knows what non-technical users would be willing to give out, but if any service asks for read access to your email, it should be called out here and the entire technical community should make a real effort to let everyone know that that's giving away the keys to the kingdom, letting that entity basically steal your credentials for every web services you use. Obviously, if you use any kind of remote email service, whoever provides that service has some kind of access to your email. But nobody else ever should.