Hacker News new | ask | show | jobs
by chime 6399 days ago
1. Twitter users give any odd site their Twitter username and password. 2. Twitpay and Twitter now have the ability to pay other Twitter users via simple tweets.

So all someone has to do is create a Twitter-app that collects username and password for 10,000 users and randomly starts paying themselves. What could go wrong?

2 comments

Well for one, Twitpay has checks in place to limit the amount that any one account can send or receive in a given time period.
Twitpay doesn't let you link it with a credit card or anything. You have to authorize the paypal payment anytime you want to add money to it, so the only money someone could take that way is the money you leave in your account.