Post

What do I mean when I say @bookhive.buzz runs on AT Proto? You can use your existing Bluesky account to log into it (no need to create another account), and then you can access a Good Reads-like social platform where you can easily find your existing Bluesky mutuals.

That’s cool! I’m admittedly a little concerned about how much access it wants to my account AND it doesn’t seem to work with app passwords but ahhhh, I’ll just go bug them about that. 😁

App passwords are actually less secure than OAuth like that Because app passwords grant EVERY permission, and generate an access token that doesn't expire, while OAuth will expire the access if you have no activity after a few days or weeks (depends on the app) +

Oh! That’s good to know! Thank you for the information! I had always assumed (and we know what happens when you do that 😁) that the app password was a more limited form of access.

App passwords can be erased anytime you want, but it's hard to track if a bad actor is using the app password access without you knowing While with OAuth, as I see you have your account hosted with Bluesky, you can see all active sessions here bsky.social, and revoke access too

0 reposts3 likes

Thanks for explaining @vicwalker.dev.br. This is exactly right, this is about as safe as it gets with Bluesky account handling. I could probably not ask for your Bluesky following until I need it though, so maybe I will do that