This looks interesting. A lot of people don't want to blog and things like Twitter suit them.
You say not to worry about security, but I'm afraid I do. Not all of us will read the source code. I think we are going to see a few services using the Steem blockchain and we have to be wary about giving out details that could potentially be exploited. It would be better if Steemit could use a token or something like various site use to authorise access.
Or am I missing something. I see I have 4 different passwords for Steemit (maybe 5?). Which one would Squeek need?
Yes steemit definitely needs to host the delegated authority verification: in my opinion an app should be a user towards where u delegate (in this case) posting authority to and which you (as owner) can always instantly revoke access. The allowing and disallowing of this would go thru a steemit.com environment as this is the most user seen and trustworthy location.
I think in this case u would need to share ur posting key (which is the one with least permissions: write and upvote) with squeek.
The platform is still in development but to run trustworthy third party apps i thibk your suggestions and mine are to be implemented :)
Delegated authority is in the works. @fabien is working on a project called SteemConnect right now that does the exact thing you are speaking about. I plan on being one of the first developers to implement his product once it is finished. I 100% agree with what you guys are saying.
Any idea what this means or why it happened?
Did my key change after logging into this?

No my friend. That was me hacking you. GET OWNED. Jk, It's you updating your profile picture. I save the profile picture update to the blockchain. Never Fear.