Comment by Simon Jones on "Does OAuth Have a Dark Side?"

suppressed@unknown.org (Simon Jones) — Sat, 07 Nov 2009 17:09:59 GMT

Some third party Twitter applications use Twitter for authentication. If an attacker has a victim's Twitter password, then the attacker can login to one of these applications and stay logged in to the application after the victim changes his Twitter password. In this scenario, it is useful to offer the user the option to revoke OAuth access tokens.

Posted by: Simon Jones

Dare Obasanjo aka Carnage4Life - Comments on Does OAuth Have a Dark Side?

Comment by Simon Jones on "Does OAuth Have a Dark Side?"