This MIT Website Tracks Your Digital Footprint Through Gmail
11–18 of 18 posts
Re: This MIT Website Tracks Your Digital Footprint Through Gmail
#12Interesting, but not very useful to somebody who's an avid deleter of old e-mails. Kind of paints an odd picture. Also, anyone else get a stuck logout&delete button after getting the data? Ended up having to revoke access via Gmail Accounts.
Re: This MIT Website Tracks Your Digital Footprint Through Gmail
#13very interesting, analyzed 40k+ emails and I didn't find that much I didn't already know. More surprised about what can be seen with just an oauth token.
Most Oauth tokens won't ask for this highly elevated permission.
OAuth is not designed around Authentication, the Auth in OAuth is actually about Authorisation. It was designed for this purpose, to authorise others to have access to your mail, or contacts, etc. That it has been co-opted for Authentication purposes (particularly in Oauth2) has just been a side effect.
Re: This MIT Website Tracks Your Digital Footprint Through Gmail
#14Re: This MIT Website Tracks Your Digital Footprint Through Gmail
#15Interesting, but not very useful to somebody who's an avid deleter of old e-mails. Kind of paints an odd picture. Also, anyone else get a stuck logout&delete button after getting the data? Ended up having to revoke access via Gmail Accounts.
Re: This MIT Website Tracks Your Digital Footprint Through Gmail
#16It's odd that I have yet to see a single website that handles oauth failures gracefully. (e.g. hitting the cancel button).
Re: This MIT Website Tracks Your Digital Footprint Through Gmail
#17What the ...? Never ever share your login credentials with a third-party. This could have been done as local open-source tool. Why is this a web app? You can do this yourself with tools like Gephi.
It's not asking for your login credentials, it uses an oauth system and asks for permissions.
Re: This MIT Website Tracks Your Digital Footprint Through Gmail
#18Earlier quoted context omitted.
It's not asking for your login credentials, it uses an oauth system and asks for permissions.
And plus, you know the NSA is looking at your mail anyway, so what further harm could a bunch of MIT grad students do?