Comment

Comment by petargyurov

I don't get this:

> Nothing I did would technically be considered an ‘exploit’

Erm, yes it can? It's exploiting a glaring vulnerability in Google's auth flow, or at the very least a dodgy way to expose master tokens.

parent petargyurov 5 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton