Post ARIoKrii5Xz5lThUHI by lukedashjr@bitcoinhackers.org
(DIR) More posts by lukedashjr@bitcoinhackers.org
(DIR) Post #ARIFAa2zRbnvf5XwTg by lukedashjr@bitcoinhackers.org
2023-01-04T08:04:15Z
0 likes, 1 repeats
Ok #Mastodon I changed my password, and the server says I only have one session (this browser).Yet both my phones (compromised and new) are still fully functional with Subway Tooter.How do I lock out all the sessions from before my password change???(Ideally before the attacker figures out some way they can abuse the access)cc @SubwayTooter
(DIR) Post #ARIG3zVoT4sQZCRxnk by orthzar@liberdon.com
2023-01-04T08:14:17Z
0 likes, 0 repeats
@lukedashjr >Yet both my phones (compromised and new) are still fully functional with Subway Tooter.Perhaps your phones have an API key set in your profile. On teh Mastodon instance I'm on, there is a Development section of settings, which is where I can grant applications access to my account.
(DIR) Post #ARIG80Apwx37mFYEAy by lukedashjr@bitcoinhackers.org
2023-01-04T08:15:00Z
0 likes, 0 repeats
@orthzar "You have no applications." :/
(DIR) Post #ARIGd9MHqqZhEwl8c4 by orthzar@liberdon.com
2023-01-04T08:20:36Z
0 likes, 0 repeats
@lukedashjr Hmm, okay. Maybe @nvk could help? Surely he can revoke app sessions via the backend.Also, I quickly glanced at the source code for Subway Tooter, but I remembered that I can't read Java code or Japanese.
(DIR) Post #ARIkUflwxtglmxdY12 by hachre@mastodon.hach.re
2023-01-04T13:55:14Z
0 likes, 0 repeats
@lukedashjr @orthzar there's preferences -> Development and Preferences -> Account -> Authorized Apps... make sure you've checked both areas
(DIR) Post #ARIoKrii5Xz5lThUHI by lukedashjr@bitcoinhackers.org
2023-01-04T14:38:17Z
0 likes, 0 repeats
@hachre @orthzar Bingo! Thanks. (It was the latter)