Sign in with Google: how OAuth lets an app in without your password
Sign in with Google or a password: what an app can and cannot do with your account
Is Sign in with Google safer than a password? What an app can really do with your Google account, what is left when the app gets hacked, and the price you pay for one tap.
-
1
The whole supper club signs in with Google now. Look inside Rono's server. For each member, it keeps a refresh token, and the name and email the ID token gave. With them, it can see your calendar every Sunday. Your password is not there.
-
2
So how far can it go? Could the app read your email, change your Google password, or sign in to Google as you?
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88