Hacker News Reader

How do you propose Snapchat, a company primarily producing a mobile application, prevent usage of its API?

You act like someone can't (with your username and password) (automatically or otherwise) scrupulously transact on your behalf with PayPal.

If you have the username/password - in a non-MFA system - you have access to everything.

View on HN

True. One problem specific to Snapchat is that there are already a ton of 3rd party clients that users trusted with their username and password. That user/pass combo now suddenly has the potential for financial abuse without any new permissions. It's bad to add scope to previously granted authentication, especially when you're talking about finance.

Reply on news.ycombinator.com