You May Have Unknowingly Granted Apps Access To Your Direct Messages

You can read all of the details in the IOActive Blog here (it’s kind of long), but here’s a quick summary of what happened:

This researcher was testing a Twitter app and realized that the app should NOT have had access to his direct messages (the app didn’t sign up for this access and he didn’t authorize it) but it DID have access.

After