Quote:
Originally Posted by innocenat
This is the first time I have even seen two-factor authentication and application passwords being called "privacy theft".
|
Yeah. The xoauth2 terms and conditions being promulgated by some providers (notably MS) sound much more like actual theft though: they reserve the right to ban you for using clients they haven't "approved", and to be "approved" clients need an alleged "security review" that costs a perfectly reasonable not at all suspiciously-round-numbered $100,000. And after it gets its "review" they might decide at any time that it needs another one, at your cost, oh that's another $100k. All this when a decently-designed protocol (like the one they're using) won't allow a malicious client to pose a threat to the server anyway!
More obvious anticompetitive "use our clients or pay our extortion fees" tactics to try to shut down one of the last remaining bastions of open protocols and hackable clients on the Internet I have never seen.