Enlarge (credit: Aurich Lawson)
(credit: https://archive.md/mSYxk)
Gab quickly took the site offline and removed the post, but not before it was archived here. When the service was restored a few hours later, a statement Torba posted said that Monday’s breach was the result of site administrators failing to revoke OAuth2 bearer tokens, which browsers and mobile apps store after a user has successfully logged in to a site.
Read 9 remaining paragraphs | Comments