I used to be pretty casual about contract authorization—just click "Unlimited" to save time, since I was busy watching volatility and placing orders, and I’d just glance at it before bed and turn off the lights. Later I realized, leaving authorization active without revoking it is like not locking the door: you might not get robbed immediately, but if something does happen, it’s a wave that takes everything away, regardless of whether you’re watching the market or not. Now I basically revoke permissions right after use, or at least set a small limit; revoking access has become a fixed step before sleep, lazy or not, I have to do it. Recently, social mining and fan tokens have become popular again, and everyone’s saying attention is mining—basically, the more focused your attention, the easier it is to be manipulated or phished, and a slip of the hand in authorization can lead to loss… I won’t pretend, I still sometimes want to take a gamble, but at least I make sure to lock the door first.