Hacker Times
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
ThanosAkr
66 days ago
|
parent
|
context
|
favorite
| on:
1-Click GitHub Token Stealing via a VSCode Bug
I am a bit confused. What if I just revoked OAuth access to github.dev? Wouldn't that just make the token unusable?
ammar2
66 days ago
[–]
You cannot, it doesn't go through the regular OAuth flow. GitHub just automatically grants it a token.
ThanosAkr
65 days ago
|
parent
[–]
Oh, i see thanks for the reply.
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
