Hey @facebook, demanding the secret password of the personal ... • Aaron Parecki

52°F

e-sushi https://twitter.com/originalesushi

Hey @facebook, demanding the secret password of the personal email accounts of your users for verification, or any other kind of use, is a HORRIBLE idea from an #infosec point of view. By going down that road, you're practically fishing for passwords you are not supposed to know!

Sydney, New South Wales • 52°F

Sun, Mar 31, 2019 11:27pm +00:00 (liked on Tue, Sep 17, 2019 12:04pm +10:00) #infosec #facebook #oauth #security

Have you written a response to this? Let me know the URL:

Posted in /likes using quill.p3k.io