I was logged into my gmail account and after visiting this site, without signing up for anything I get a welcome email, WTF?
That's not the expected behavior. We use Google Accounts for Sign In, but it should present you with a window that says "sign in to wattvision" and ask you for your password again, even if you are already logged in to Gmail. We'll confirm / try to repro on our end. Any other info you have is appreciated. UPDATE: We definitely want to fix this, we do not want to surprise or inadvertently sign up users. That's not our…
Wattvision (YC W09) Now Shipping
31–40 of 72 posts
Re: Wattvision (YC W09) Now Shipping
#32I'm speculating, of course, but it seems like a real risk to me.
Re: Wattvision (YC W09) Now Shipping
#33Re: Wattvision (YC W09) Now Shipping
#34Earlier quoted context omitted.
This looks like a nice tool to have (if a bit expensive), but seriously, a bug like that is a real deal killer. Having my house appear after clicking a link freaked me out.
Having your house appear? Did they somehow pull your physical address info?
Re: Wattvision (YC W09) Now Shipping
#35Re: Wattvision (YC W09) Now Shipping
#36Re: Wattvision (YC W09) Now Shipping
#37Earlier quoted context omitted.
That's not the expected behavior. We use Google Accounts for Sign In, but it should present you with a window that says "sign in to wattvision" and ask you for your password again, even if you are already logged in to Gmail. We'll confirm / try to repro on our end. Any other info you have is appreciated. UPDATE: We definitely want to fix this, we do not want to surprise or inadvertently sign up users. That's not our…
My navigation was: - home page - /house - /info/sensors - /house/add I went to the last page because I was curious that you had to register _before_ buying. At this last page I saw my gmail username pre-populated in the form automatically which freaked me out (I didn't even know grabbing a visitor's google account name was possible) and I closed the page, I did not submit (voluntarily) any info. Then within a couple…
(I didn't even know grabbing a visitor's google account
name was possible)
I didn't either, but it seems you can simply use Google's API to allow a user to sign in, where the user name of the user that signs in (or is already signed in!), is reported to the user of the API via a callback. The request after you sign in has a 'continue' HTTP header that says something like: continue=http%3A%2F%2Fwww.wattvision.com%2F_ah%2Flogin%3Fcontinue%3Dhttp%3A%2F%2F
www.wattvision.com%2Fhouse&service=ah&dsh=2844188452075813479&timeStmp=&secTok=&GALX=
DTEVMCX16p4&Email=&Passwd=Re: Wattvision (YC W09) Now Shipping
#38I was logged into my gmail account and after visiting this site, without signing up for anything I get a welcome email, WTF?
Same thing for me. Whatever you're doing, you need to stop it, or else you'll have worse things to worry about than complaining HN users ;).
Re: Wattvision (YC W09) Now Shipping
#39I was logged into my gmail account and after visiting this site, without signing up for anything I get a welcome email, WTF?
How is that even possible? So if I'm signed into my gmail, a site can detect my email address? This seems like a huge privacy bug on googles behalf if this is actually happening.
Re: Wattvision (YC W09) Now Shipping
#40Earlier quoted context omitted.
That's not the expected behavior. We use Google Accounts for Sign In, but it should present you with a window that says "sign in to wattvision" and ask you for your password again, even if you are already logged in to Gmail. We'll confirm / try to repro on our end. Any other info you have is appreciated. UPDATE: We definitely want to fix this, we do not want to surprise or inadvertently sign up users. That's not our…
My navigation was: - home page - /house - /info/sensors - /house/add I went to the last page because I was curious that you had to register _before_ buying. At this last page I saw my gmail username pre-populated in the form automatically which freaked me out (I didn't even know grabbing a visitor's google account name was possible) and I closed the page, I did not submit (voluntarily) any info. Then within a couple…
http://code.google.com/appengine/docs/python/users/overview....
I am not sure if you wanna do federated login on appengine.