SamBent on Nostr: #OPSEC365 147/365 Every OAuth authorization you've granted is a standing breach. Most ...
#OPSEC365 147/365
Every OAuth authorization you've granted is a standing breach. Most are still active.
That quiz app from 2018 still holds read access to your friend list and email. Each authorized app runs its own retention schedule, independent of the platform.
MITRE ATT&CK T1585 (Establish Accounts): adversaries build cross-platform access. Your apps built the same access the moment you clicked Allow.
Audit every platform. Revoke anything unused. #OPSEC365
Published at
2026-08-15 09:21:55 UTCEvent JSON
{
"id": "99c28499329ca2f0f4ca92032c25391c21e705527b74afd26ef8a4305372e406",
"pubkey": "2786c134148537aa3142222cccc1b6fcf4863643ca78a9625d91aa9748d0e478",
"created_at": 1786785715,
"kind": 1,
"tags": [],
"content": "#OPSEC365 147/365\n\nEvery OAuth authorization you've granted is a standing breach. Most are still active.\n\nThat quiz app from 2018 still holds read access to your friend list and email. Each authorized app runs its own retention schedule, independent of the platform.\n\nMITRE ATT\u0026CK T1585 (Establish Accounts): adversaries build cross-platform access. Your apps built the same access the moment you clicked Allow.\n\nAudit every platform. Revoke anything unused. #OPSEC365",
"sig": "f4fc372c0b2c0229d5c280615af07f956f676cab8f0c905f011f27a2383095e587d03d5097d5f2a9c25f6371d91d3d3767e542722e738c5eb9cadc0cbc270d2d"
}
