Live data from Hacker News

Start ups, please don't force me to log in with Facebook

news.ycombinator.com

151–160 of 279 posts

Re: Start ups, please don't force me to log in with Facebook

#151
post #7

This is by far my largest complaint with Quora.

Does Quora not provide a "Sign Up With Email" option (you need js!) right under the Facebook connect button? Granted, I don't understand the big deal about Quora, but I know an email signup when I see it.

Re: Start ups, please don't force me to log in with Facebook

#152

If facebook deletes your account then you run the risk of losing your account on other sties. I don't sign-up using facebook and so our site will have the option to use Facebook but won't require it.

Has someone ever seen a site that would use the Linkedin API?

Re: Start ups, please don't force me to log in with Facebook

#153
post #67

Earlier quoted context omitted.

What's impractical about it ? I'm very comfortable with separate identities per-site. If your site isn't worth a separate identity, why am I interacting with it in the first place?

I'm comfortable with separate identities per site, but it is impractical for most people. You have three general choices: - Maintain a separate login and password for every site. This requires a lot of memorization and is a pain in the ass when you find yourself trying four passwords because you forgot which you used. - Use password management software or a naming system that lets you keep track. This is effective bu…

I think this is an issue that needs to be dealt with in schools, because it's going to be VERY important by the time current kids grow up, and most of them don't know what they're doing.

Here's what I do. I have two branches of passwords: one unsecure and easy to dictionary attack, another that was randomly generated and I got into muscle memory when I was a boy. Each secure site gets its own slightly different version of the password, with an additional suffix which is usually a small word.

It's a system that's served me well. Are there some glaring weaknesses that I should take account of and switch to something else?

Re: Start ups, please don't force me to log in with Facebook

#154
post #69
post #47

Earlier quoted context omitted.

I have two fake Facebook accounts that I use to sign in to services. I even have a good rep on Quora using a completely fake name. Forcing Facebook because you think it will give you real people and verified accounts is wrong.

Sorry if I wasn't clear. I'm not saying that forcing Facebook will 100% eliminate fraud. But forcing Facebook can reduce fraud, by several orders of magnitude. Authentication isn't -- and shouldn't be -- a one-size-fits-all problem. For us, Facebook has worked extremely well. (We originally supported Twitter and OpenID but dropped them when it turned out that 100% of our fraud incidents had authenticated with one of…

The accounts have nothing in common - not IP address, nor cookies nor names nor friends or anything. With the fake accounts I just added fake friends (Facebook was so kind to suggest them) and they approved me. I even wrote 'whats up' on some peoples walls and they replied. No idea who they are, seems people just need somebody to talk to.

I am a bit of a privacy nut (multiple browsers, incognito, proxy servers, VPN's, multiple accounts online (including this site)) and I intentionally keep my person, work, online life etc. completely separate. So as interesting as it would be for you to test my accounts, it means I would have to kill you :)

Re: Start ups, please don't force me to log in with Facebook

#155

Earlier quoted context omitted.

Yeah, exactly. When I see a Facebook login, what I parse is "this site decided that it was a better idea to leave security to the professionals rather than hack something together. A secondary benefit is that I get to get through this signup in 20 seconds than 3 minutes." When I see a dodgy username and password form, what I parse is "I can't wait for them to email me back my password in plaintext, and then store it…

Why do you think Facebook security is security by professionals? I fully expect that Microsoft and Google have a stronger set of security experts working on their various authentication and encryption methods.

Because they are paid in the charge of the largest online authentication system in the world?

That's not to say that they are the strongest professionals in the world, of course.

Re: Start ups, please don't force me to log in with Facebook

#156
post #149

Earlier quoted context omitted.

I won't implement OpenID for any site where I have a say. It needs to die so that something good can step into its place. If you have a site that requires OpenID, I won't use it for the same reason I won't use your site that requires Facebook. If you're going to implement it, make sure you also implement a standard user/pass registration or you'll lose a lot potential users (as in most of them).

Define "something good." You haven't given any reasons on why it sucks.

Something that doesn't require you to be a techie to understand. OpenID is a bit advanced for many users.

FB Connect actually does a pretty good job at being "easy to use". Just log into your FB account and you are set. I know it's not fair, but most people havn't posted anything to that openid website.

Google or Yahoo logins would work, since there's a recognizable brand name and there's a good chance that the user has an account on those sites.

Re: Start ups, please don't force me to log in with Facebook

#157
post #106

Earlier quoted context omitted.

The inconvenience of finding/creating a Facebook account to use in joining Quora is, imo, completely worth the value offered by Quora. You have to choose your battles. At a certain point I would rather have access than have my way.

The problem is, in order to know that Quora is good enough to force you to use FB Connect even though you don't want to, you have to use FB Connect... I'm certain this slows their growth.

Or maybe it makes sure that the only people who go the length to sign up are aware of the benefit of Quora, and therefore likely to be quality users contributing the the quality of Quora. In a sense, Quora uses Facebook as a filter to get great users.

Re: Start ups, please don't force me to log in with Facebook

#159
post #148

I don't use Facebook. Incidentally, I adblocked "facebook.com" the other day, and a lot of sites load much faster now. In three days, the rule has been hit over 1300 times! If I had a Facebook account, this would scare me.

what happens if you ad-block google?

Lots and lots and lots of sites fail because they depend on jquery hosted by google.
Post reply on HN