Hacker News new | ask | show | jobs
by x1798DE 3627 days ago
I think the lesson is that you only have to trick people into authorizing your malicious app once.