Hacker News Reader

Wait. Does that mean I could send messages to all users using the app which is paired to this key? Hopefully no-one finds this out :/

If you get the device tokens too, possibly. Unfortunately it looks like some of these are ALSO exposed. Argh.

No - each user is assigned a token that you would also need to use in combination with the private key.

You could get all of the feedback pending for that key, as well, which would expose tokens, and potentially disrupt service.