[PrivacyBadger] OAUTH flows

Yan Zhu yan at eff.org
Fri May 30 20:40:13 PDT 2014


On 05/30/2014 05:47 PM, Peter Eckersley wrote:
> There's a chance we are going to break some OAUTH flows that are out
> there, and will need to figure out if they can be handled by the new
> whitelisting mechanisms.
> 
> Just for kicks, I decided to test Hackpad's OAUTH login flows.  "Sign in
> with Google" works for me; "Sign in with Facebook" doesn't.

That should be fixed soon; I have submitted a Hackpad pull request to
disable Facebook logins forever. :P

> 


-- 
Yan Zhu  <yan at eff.org>, <yan at torproject.org>
Staff Technologist
Electronic Frontier Foundation                  https://www.eff.org
815 Eddy Street, San Francisco, CA  94109       +1 415 436 9333 x134

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: OpenPGP digital signature
URL: <https://lists.eff.org/pipermail/privacybadger/attachments/20140530/4772c505/attachment.sig>


More information about the PrivacyBadger mailing list