Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Start ups, please don't force me to log in with Facebook

news.ycombinator.com

Post reply on HN
Print view View original

141–150 of 279 posts

Re: Start ups, please don't force me to log in with Facebook

#141

Post by nuclear_eclipse »

meatmanek wrote: post #85
NewHighScore wrote: post #51

Earlier quoted context omitted.

Email is better because you are not locked into using some third party website to log in. You can set up an email server of you own if you wanted to.

OpenID works great for this too-- you can create your own OpenID provider.

Even better, you can use your domain to delegate privileges to a third party service. Eg, I have my personal domain leetcode.net delegate OpenID authentication to myOpenID.com, but if for some reason I don't like that, or decide to host my own provider, it's as simple as changing my domain's delegation info, and I can continue to use the same OpenID url everywhere.

Re: Start ups, please don't force me to log in with Facebook

#143

Post by gregable »

gregable wrote: post #137

It seems like the reason websites are starting to do this is that facebook authentication gives the developer more information than just an email/credentials. The developer can access all of the basic data in the user's profile and also grab their friend list. This means that later down the line they can automatically connect friends together inside the developer's own service without having to ask their users for th…

Not that this means I agree that you as a developer should do this, just that I understand. There are lots of hidden issues too - your service now has added another third-party dependency that could kill you if they decided to break in some way that you couldn't reverse from. Facebook now has all of your user/traffic numbers which they can use against you if they ever decide to compete with you on any front. In the future, advertisers can potentially reach users you've pre-targeted without paying you and instead paying facebook. The list goes on. It's putting a lot of trust in your relationship with facebook.

Re: Start ups, please don't force me to log in with Facebook

#144

Post by xiongchiamiov »

StavrosK wrote: post #133
binaryfinery wrote: post #110

Yes: Don't force me to log in with facebook. No: Don't force me to make another fucking password. I have a whole shitload of passwords. I use an independent (not in the browser) password tool. I'd really like to be able to generate a password and login automatically: i.e. for my tool and the website to automatically hook up. Oh, yeah that's called OpenID: http://openid.net/get-an-openid/ And no jokes about my tool pl…

The only thing I wish for nowadays is for the public to gain a better understanding of OpenID so we can start using it on every site. It's the best thing to ever come out.

It became significantly easier when Google (and Yahoo!, and MySpace) became OpenID providers. If you do something like StackOverflow does (click the Google icon to login with Google), then it's pretty low-effort to use.

Re: Start ups, please don't force me to log in with Facebook

#145

Post by xiongchiamiov »

gregable wrote: post #137

It seems like the reason websites are starting to do this is that facebook authentication gives the developer more information than just an email/credentials. The developer can access all of the basic data in the user's profile and also grab their friend list. This means that later down the line they can automatically connect friends together inside the developer's own service without having to ask their users for th…

The reasons you point out as benefits I see as downsides.

Facebook tends to leak personal information like crazy as it is; they don't need any help from random 3rd parties.

Re: Start ups, please don't force me to log in with Facebook

#146

Post by xiongchiamiov »

far33d wrote: post #37
mike-cardwell wrote: post #31

I've not seen any websites that require a Facebook account to log in, but my immediate reaction on seeing one would be to assume the person who implemented it doesn't know what they're doing and can't be trusted with my data.

Why would you trust a website asking for an email and password more?

He didn't say that he did.

Re: Start ups, please don't force me to log in with Facebook

#147

Post by jdavid »

jasonkester wrote: post #138
binaryfinery wrote: post #110

Yes: Don't force me to log in with facebook. No: Don't force me to make another fucking password. I have a whole shitload of passwords. I use an independent (not in the browser) password tool. I'd really like to be able to generate a password and login automatically: i.e. for my tool and the website to automatically hook up. Oh, yeah that's called OpenID: http://openid.net/get-an-openid/ And no jokes about my tool pl…

I won't implement OpenID for any site where I have a say. It needs to die so that something good can step into its place. If you have a site that requires OpenID, I won't use it for the same reason I won't use your site that requires Facebook. If you're going to implement it, make sure you also implement a standard user/pass registration or you'll lose a lot potential users (as in most of them).

What Problem do you have with OpenIDv2a + OAuth?

Re: Start ups, please don't force me to log in with Facebook

#148

Post by jdavid »

jrockway wrote: post #112

I don't use Facebook. Incidentally, I adblocked "facebook.com" the other day, and a lot of sites load much faster now. In three days, the rule has been hit over 1300 times! If I had a Facebook account, this would scare me.

what happens if you ad-block google?

Re: Start ups, please don't force me to log in with Facebook

#149

Post by hkr »

jasonkester wrote: post #138
binaryfinery wrote: post #110

Yes: Don't force me to log in with facebook. No: Don't force me to make another fucking password. I have a whole shitload of passwords. I use an independent (not in the browser) password tool. I'd really like to be able to generate a password and login automatically: i.e. for my tool and the website to automatically hook up. Oh, yeah that's called OpenID: http://openid.net/get-an-openid/ And no jokes about my tool pl…

I won't implement OpenID for any site where I have a say. It needs to die so that something good can step into its place. If you have a site that requires OpenID, I won't use it for the same reason I won't use your site that requires Facebook. If you're going to implement it, make sure you also implement a standard user/pass registration or you'll lose a lot potential users (as in most of them).

Define "something good." You haven't given any reasons on why it sucks.
Post reply on HN