Explain 3rd Party Twitter Authorisers for me
October 27, 2012 3:28 AM Subscribe
Confirm/Deny for me that lots of 'log on with Twitter' instances involve handing over a lot of rights to your twitter account which aren't relevant ?
I often come across places which are using Twitter authorisation to allow people to identify themselves.
What I don't understand (or perhaps find hard to believe) is how the person who wants the logon (for instance a blog comment provider) asks for a whole set of rights to your Twitter account which don't seem relevant.
as an example. It's what you get shown if you want to comment on some Mobypicture
They want the rights to "follow new people" and "update your profile" ? And actually in this context even "post tweets for you" is completely nuts as well. So my understanding of this is if I agree Mobypicture can add arbitary new followers at any time to my account; post random messages which appear to have been written by me and; update my profile to include material which I've never seen ?
Mobypicture are certainly not alone in this.
So my question is : have I misunderstood this - are they really getting the permissions I think are and is there any reasonable explanation for why they might want this ?