Live data from Hacker News

Show HN: Streak.com - Do sales, support and bug tracking all inside Gmail

streak.com

91–96 of 96 posts

Re: Show HN: Streak.com - Do sales, support and bug tracking all inside Gmail

#92

Login screen is showing an odd domain name, apps.googleuserscontent.com, is requesting authorization to my account. The site XXXXX.apps.googleusercontent.com is requesting access to your Google Account for the product(s) listed below

That's a Google domain, and the numbers represent a specific Chrome extension... in this case, Streak.

I realize it's a Google domain, but not a trusted Google domain.

If you look at do a search for "googleusercontent.com" it shows that it hosted malware and some other nasty stuff.

  http://www.google.com/safebrowsing/diagnostic?site=googleusercontent.com/

If I'm on streak.com and try to login I would like to be authorizing Streak.com

Re: Show HN: Streak.com - Do sales, support and bug tracking all inside Gmail

#94

I am having login problems. I am stuck on step 2.

If you're having problem, please goto gmail and Streak will ask you to sign in there. The usual culprit is third party cookies being disabled - we wrote a help article here: http://support.streak.com/customer/portal/articles/386931

I disabled 3rd party cookies when the whole Google/Safari flap arose recently and was wondering if I might be missing anything. In this case the app just doesn't work so that's pretty obvious. I'm wondering if I'm experiencing any other harder to discern problems?

Are 3rd party cookies really required to deliver this sort of app or is it just easier? I suppose otherwise session IDs would need to go in the URL or POST variables.

Re: Show HN: Streak.com - Do sales, support and bug tracking all inside Gmail

#95

Earlier quoted context omitted.

That's a Google domain, and the numbers represent a specific Chrome extension... in this case, Streak.

I realize it's a Google domain, but not a trusted Google domain. If you look at do a search for "googleusercontent.com" it shows that it hosted malware and some other nasty stuff. http://www.google.com/safebrowsing/diagnostic?site=googleusercontent.com/ If I'm on streak.com and try to login I would like to be authorizing Streak.com

I understand the sentiment, but it can't work that way. What you're authorizing for access is an anonymous unsigned Chrome extension, not the website streak.com. If they allowed the extension to define its own name so that you'd see "streak.com", then you'd see malware masquerading as safe-sounding names in the authorization dialog.

Re: Show HN: Streak.com - Do sales, support and bug tracking all inside Gmail

#96

This looks extremely cool, and I'm really tempted! In light of recent things like Path etc. (and without insinuating anything!) - could you clarify what information is sent via Streak's servers, if any?

In order to use Streak you have to give oauth access to your inbox. We use that data in order to link you to your emails from within Streak. Specifically on Streak's servers we store message meta data but no email contents.

Security and Trade Secrets are my major concern as well. Meta data could mean "gmail message ID", but it could also mean "all header info, including message title & users emailed." Of course, that's in addition to the value of the additional data (box title, notes, "deal size") that streak is being used for.

Privacy policies are not very comforting on their own... Heck, "everyone" has one! I might suggest some more details, perhaps on your website, to satisfy wavering customers. So far there isn't much to make a businessperson feel comfortable.

Post reply on HN