I'm not following the "putting million of developers at risk". Is that because of Apple violating their patent?
---
All this seems like pretty straightforward oauth stuff to me. The author at some point mentioned Good giving out access to full accounts in regards to PokemonGo that iirc was a mistake and fixed.
---
The thread mentioned in the article is a bit weird and long-winded as well. I wasn't able to read much from either it, or the paper.
https://mailman.nanog.org/pipermail/nanog/2019-February/0996...