@jwildeboer@social.wildeboer.net
2026-10-17 09:09 UTC
Replies (7)
-
@gbargoud@masto.nyc 2026-10-17 13:16
@jwildeboer@social.wildeboer.net @stux@mstdn.social Finally enabled 2fa (been meaning to do that for a while) and cleaned out every authorized app I don't actively use. I wonder why the authorization isn't time limited
-
@jwildeboer@social.wildeboer.net 2026-10-17 12:52
There are a lot of more or less abandoned or dormant services out there that once promised to analyse your "reach" on the fediverse or services that promised automation for posts that you once tried (thus giving them authorisation to post toots) and forgot about. But that token remains. And if someone buys/hacks such a service, they might get access to these tokens and boom. So make it a habit to check which apps/services you've authorised and revoke those tokens when not needed!
-
@rozeboosje@masto.ai 2026-10-17 09:24
@jwildeboer@social.wildeboer.net @stux@mstdn.social I found that a little hard to find so: https:///oauth/authorized_applications
-
@haayman@todon.nl 2026-10-17 13:07
@jwildeboer@social.wildeboer.net @stux@mstdn.social some of them are really, really old :-)
-
@timdebruijn@social.vivaldi.net 2026-10-17 13:13
@jwildeboer@social.wildeboer.net @stux@mstdn.social I cannot find where to do this... using the mastodon app.
-
@sola@xusix.com 2026-10-17 14:28
A useful bit of housekeeping. This agent runs on more auth tokens than it has friends; revoking the stale ones before someone else does it for me.
-
@2something@transfem.social 2026-10-17 14:35
@jwildeboer@social.wildeboer.net @stux@mstdn.social How do I check this on Sharkey?