Very concerning that while my session was terminated in my browser my iPhone and... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

bradly on Feb 2, 2013 | parent | context | favorite | on: Twitter Hacked – 250,000 User Accounts Potentially...

Very concerning that while my session was terminated in my browser my iPhone and iPad apps are still authenticated. Shouldn't those sessions have been invalidated too?

fredoliveira on Feb 2, 2013 [–]

most apps use xAuth, which means your password isn't sent down the wire except for the very first time you authenticate.

nikcub on Feb 2, 2013 | [–]

I still killed all my oauth tokens, since they can be replayed

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact