<story><title>Holy War on Sites That Demand Pinboard Passwords</title><url>https://blog.pinboard.in/2014/10/holy_war_on_sites_that_demand_pinboard_passwords/</url></story><parent_chain></parent_chain><comment><author>jurassic</author><text>I agree asking for passwords is bad, but he&amp;#x27;d probably have gotten cooperation from third parties much more quickly if he were following OAuth, OAuth2 or some other widely used standard. Forcing others to write bespoke code to handle a weird non-standard auth, however simple, is a major impediment to people using the Pinboard API.&lt;p&gt;Also, promising to break working integrations with the &amp;quot;ban hammer&amp;quot; seems like a poor reward to give users for alerting you to a problem.  If a user values the integration more than the security of their bookmark list (as I&amp;#x27;m guessing many people do, given the number of people using Pinboard via IFTTT), they won&amp;#x27;t be reporting that to you.</text></comment>
<story><title>Holy War on Sites That Demand Pinboard Passwords</title><url>https://blog.pinboard.in/2014/10/holy_war_on_sites_that_demand_pinboard_passwords/</url></story><parent_chain></parent_chain><comment><author>joshu</author><text>Man, I wanted to do this so badly on the original delicious.&lt;p&gt;I have some ways of identifying aggregate misbehavior if you want to catch this. Happy to help.</text></comment>