Oh, no !
The cat should have stayed in a box, if this gains too much popularity, HN will read like MySpace back in the days.
And top HN news will be: "A browser plugin that translates Unicode back to ASCII".
The cat should have stayed in a box, if this gains too much popularity, HN will read like MySpace back in the days.
And top HN news will be: "A browser plugin that translates Unicode back to ASCII".
The user though the oauth app was legit because it was the "same" as the company name, accepted the connection, and promptly had their account emptied: https://www.reddit.com/r/Bitcoin/comments/2lt76n/warning_coi...
Now, it's up for debate whether any (psuedo?) financial institution should offer full oauth access (at least without having a human review possible oauth connectors), but the point is, decorative hackernews submissions are the least malicious use of this trick.
We'll need a plugin to reverse this, anyone up for it?