Comment by sneak
15 hours ago
> No, the OAuth token is supposed to be used solely with the context of a first-party app only.
The web doesn't work like that. The operators of google.com saying you must only use Chrome to load it is a ridiculous concept. It's not spoofing to use your own access credentials on your own computer to access your own account on an HTTP API.
By this logic video game companies shouldn't be allowed to ban cheaters.
Technically speaking, they haven’t been able to. There’s really no way of stopping someone using an alternate client if it appears to the server the same way.
The only reason video game cheating is more difficult is because it uses custom protocols and message types, and it needs to be reverse engineered. Usually it’s just easier to reuse the existing game client and patch it to report to the server that everything is normal.
It’s why anticheat runs in the kernel now.
>The web doesn't work like that. The operators of google.com saying you must only use Chrome to load it is a ridiculous concept.
I have no idea what you are talking about. Chrome? Are you sure you are replying to the right thread?