HN Explorer

5 comments

[ 0.23 ms ] story [ 20.4 ms ] thread
mmastrac
The automation part of this one seems nice, but does it really need those "everything" perms (EDIT: on Mastodon)? If it does, some copy about why it needs it, how much information is stored, and how you can revoke it would be appreciated before pulling the trigger.
goulinkh
My bad had another feature that is WIP, I forgot to lower the permissions on Twitter! It only need read access for twitter as for Mastodon it need write in order to follow users.
mmastrac
Twitter didn't really bug me (since I'm moving off anyways). I think it was the Mastodon ones that made me think twice:

    Everything
    Read and write access

    Relationships
    Read and write access

    Push notifications
    Read and write access
goulinkh
Thanks @mmastrac for your feedback! I will investigate on the minimum required access on Mastodon and definitely add a documentation on how this works and how to revoke the access once the automation is done :+1: