@Edent yeah the way this guy screwed up the site is awful. It just made me think of macaroons where you can grant a subset of privileges which the entity gaining the privileges can also make a subset to another entity. Not that I’d trust Twitter to implement this, but it would be cool if the API could let you issue macaroons for cases like this.