[chewxy]

The OAuth flow is poorly done. It's supposed to be in an iframe/popup. Instead the OAuth window is full frame and I couldn't find the OK button on first look

Also, why does it need posting rights?

EDIT: Got the list of friends. Totally incorrect. People I rarely interact with are in the top of the list.

[bradleyland]

It needs posting rights because it silently posts to your feed.

I reported them as spam. As far as I'm concerned, any app that posts to my feed without my explicit permission is spam.