Hacker News new | past | comments | ask | show | jobs | submit login

This seems like a massive security fail on Google's part. There's no reason the OAuth flow should be able to request admin privileges silently. As a user, I really must get a prompt asking me (and warning me!).



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: