Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: What percentage of your users are using social login?

news.ycombinator.com

Post reply on HN
Print view View original

121–130 of 172 posts

Re: Ask HN: What percentage of your users are using social login?

#121

Post by benp84 »

jfaucett wrote: post #76

All my side projects and any projects I control use exclusively social login. Here's why. 1. Its way easier on me. I don't have to worry about password resets or users hacking an account in the site. OAuth and be done. 2. I don't have to deal with any outgoing or incoming emails and complaints dealing with login. 3. I don't have to worry about scammers, since google/facebook pretty much require phone, a non fake emai…

On point 2: people forget which service they signed in with, accidentally make multiple accounts and think their data is gone, and sometimes APIs are down (mostly LinkedIn) or throw errors, all of which lead to customer service headaches without an email/password reset backup.

On points 3 & 4: I've seen more fake Facebook and LinkedIn accounts than I can count. Some users have dozens. I haven't looked into how they create them so easily, but they do. While it's certainly more hassle to get one than a fake email, there's still a ton of them.

Re: Ask HN: What percentage of your users are using social login?

#122

Post by Zak »

pen2l wrote: post #105
f2n wrote: post #92

Earlier quoted context omitted.

I am unlikely to use your site if it requires me to use a Google or Facebook login. Those companies already have too much power to fuck my life up, I have no interest in giving them any more.

While I'm sympathetic to your viewpoint and to a large degree share it, you are among a vanishingly small minority to not use a site or service just because of social login. 'jfaucett probably is fine sacrificing losing this small minority.

I'm in this minority as well. I don't want Google, Facebook or Twitter to control my identity on other sites and won't use social login unless something is very tightly tied to a given social platform.

Re: Ask HN: What percentage of your users are using social login?

#123

Post by rhizome »

web007 wrote: post #104
chiefalchemist wrote: post #61

Earlier quoted context omitted.

I think you just made a case for DuckDuckGo or (e.g.) LastPass to provided an authentication servive. Mind you, products would have to adopt it. But from a sec + privacy perspective it makes sense to have a 3rd party whose biz model isn't to harvest your personal details.

This was OpenID, which lets you choose your third-party provider at will, or even self-host. It's mostly dead now. People wanted the convenience of FB/GOOG/TWIT over the freedom of self-hosting.

But everybody just uses some library for that stuff, I wonder why there aren't visible "Log In with [list of 80 OpenAuth providers]" sites or services.

Re: Ask HN: What percentage of your users are using social login?

#125

Post by incompatible »

jfaucett wrote: post #76

All my side projects and any projects I control use exclusively social login. Here's why. 1. Its way easier on me. I don't have to worry about password resets or users hacking an account in the site. OAuth and be done. 2. I don't have to deal with any outgoing or incoming emails and complaints dealing with login. 3. I don't have to worry about scammers, since google/facebook pretty much require phone, a non fake emai…

Is it really so hard for scammers / spammers to create fake Google / Facebook accounts? What is so hard about creating any number of "non fake emails"? I assume a non-fake email (address) is just one that can accept incoming messages.

Re: Ask HN: What percentage of your users are using social login?

#126

Post by askvictor »

f2n wrote: post #92
jfaucett wrote: post #76

All my side projects and any projects I control use exclusively social login. Here's why. 1. Its way easier on me. I don't have to worry about password resets or users hacking an account in the site. OAuth and be done. 2. I don't have to deal with any outgoing or incoming emails and complaints dealing with login. 3. I don't have to worry about scammers, since google/facebook pretty much require phone, a non fake emai…

I am unlikely to use your site if it requires me to use a Google or Facebook login. Those companies already have too much power to fuck my life up, I have no interest in giving them any more.

should be able to use any oauth provider, including github (as long as the service hasnt locked it to just g and facebook. i _do_ hate it hen fcebook login is the only option.

Re: Ask HN: What percentage of your users are using social login?

#127

Post by StanislavPetrov »

jfaucett wrote: post #76

All my side projects and any projects I control use exclusively social login. Here's why. 1. Its way easier on me. I don't have to worry about password resets or users hacking an account in the site. OAuth and be done. 2. I don't have to deal with any outgoing or incoming emails and complaints dealing with login. 3. I don't have to worry about scammers, since google/facebook pretty much require phone, a non fake emai…

I avoid Google, Facebook and all other "social media" like the plague due to privacy issues. I don't have any social media accounts and therefore wouldn't be able to log into any of your projects.

Re: Ask HN: What percentage of your users are using social login?

#128

Post by StanislavPetrov »

monk_e_boy wrote: post #110
f2n wrote: post #92

Earlier quoted context omitted.

I am unlikely to use your site if it requires me to use a Google or Facebook login. Those companies already have too much power to fuck my life up, I have no interest in giving them any more.

I was like you, until I looked at my unique login/pwd combinations.... there were so so many. I can't remember them all, i switch computers (I'm a teacher) a lot. Logins are so stupid, I've been able to look at my laptop to unlock it for years, touch my phone to unlock it.... login and passwords are going so i don't mind using google to log in for a few years while the rest of the world catches up. For students googl…

>For students google log in is essential. Having to create an account, then click a link in an email, then use a site is too hard.

A truly withering indictment on these students. When even the simplest, most straightforward of tasks is "too hard" for students, the future is very bleak.

>So 99% of comp sci teachers are choosing sites with social logins.

An equally withering indictment of Computer Science teachers. I would certainly protest loudly if I was forced hand over my personal information to an intrusive, third-party corporation to participate in a class.

Re: Ask HN: What percentage of your users are using social login?

#129

Post by AgentME »

oedenfield wrote: post #63
jiveturkey wrote: post #23

There's an evil with social login in that you give up the knowledge of your social (presumably personal) network to random 3rd parties. That's even worse than email address. With password managers being essentially mandatory now, it's not too hard to create a new email/password based account for every new site. But recently I realized that I don't use my FB for anything. I have zero friends, don't allow friend reques…

Wouldn't that be just as bad as using one password for every site? One account gets compromised they all get compromised.

Only if the facebook account gets compromised. If some random site you use facebook to log into gets compromised, your facebook account and every other site you log into with it is still safe.

This is not exactly worse than web sites that allow you to sign up with an email address and request password resets: if your email address is compromised, then so are all your accounts. Actually, this situation is a bit worse, because there's also the chance that the user will choose the same password as they use with their email address or other accounts, so if the site they're logging into gets compromised, then their other accounts and email may be able to be compromised too.

Re: Ask HN: What percentage of your users are using social login?

#130

Post by bjelkeman-again »

dbielik wrote: post #119
f2n wrote: post #92

Earlier quoted context omitted.

I am unlikely to use your site if it requires me to use a Google or Facebook login. Those companies already have too much power to fuck my life up, I have no interest in giving them any more.

Why not create a Facebook or Google account just for these websites? Or is it the cross domain tracking that is worrying since everyone's sites are tagged?

It becomes a mess to track where you are logged into what. And cross domain tracking.
Post reply on HN