HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
[GitHub Bug #1093] Twitter connect uses dummy email screen_name@foo.com!!!
[GitHub Bug #1093]
screen_name's may possibly be duplicated, possibly if user deletes their account and evil friend then impersonates them.
Also not being a real email it messes up notifications, preferences, etc.
You can't get email from twitter credentials. Possible solution is to store twitter ids in a col, get email if needed, compare.
screen_name's may possibly be duplicated, possibly if user deletes their account and evil friend then impersonates them.
Also not being a real email it messes up notifications, preferences, etc.
You can't get email from twitter credentials. Possible solution is to store twitter ids in a col, get email if needed, compare.
grep is your friend.
Tagged:
0
Comments