Live data from Hacker News

Why You Shouldn’t Use Facebook to Log in to Other Sites

nytimes.com

1–10 of 17 posts

Re: Why You Shouldn’t Use Facebook to Log in to Other Sites

#2
The article's fundamental argument is that using any separate service to sign in is a problem, and doesn't really distinguish between signing in with Google or signing in with Facebook, yet many products with a huge need for security (protecting PII of users) that I'm familiar with use Google sign-in. That seems to indicate a fatal flaw somewhere, either in the writer's understanding of Google sign-in, or the assumptions most companies are making about security.

Re: Why You Shouldn’t Use Facebook to Log in to Other Sites

#3
post #2

The article's fundamental argument is that using any separate service to sign in is a problem, and doesn't really distinguish between signing in with Google or signing in with Facebook, yet many products with a huge need for security (protecting PII of users) that I'm familiar with use Google sign-in. That seems to indicate a fatal flaw somewhere, either in the writer's understanding of Google sign-in, or the assumpt…

It's silly. A security flaw could exist in any other oauth provider, or password manager. I bet Facebook handled the incident better than many others in the industry would have.

Re: Why You Shouldn’t Use Facebook to Log in to Other Sites

#4
post #2

The article's fundamental argument is that using any separate service to sign in is a problem, and doesn't really distinguish between signing in with Google or signing in with Facebook, yet many products with a huge need for security (protecting PII of users) that I'm familiar with use Google sign-in. That seems to indicate a fatal flaw somewhere, either in the writer's understanding of Google sign-in, or the assumpt…

Most companies are making incorrect assumptions about security everyday.

Re: Why You Shouldn’t Use Facebook to Log in to Other Sites

#6
post #2

The article's fundamental argument is that using any separate service to sign in is a problem, and doesn't really distinguish between signing in with Google or signing in with Facebook, yet many products with a huge need for security (protecting PII of users) that I'm familiar with use Google sign-in. That seems to indicate a fatal flaw somewhere, either in the writer's understanding of Google sign-in, or the assumpt…

From the article:

>But at this moment, a sign-on service by Google or Microsoft has one big advantage over Facebook’s: Those companies did not lose control of 50 million people’s accounts, and Facebook did.

Re: Why You Shouldn’t Use Facebook to Log in to Other Sites

#7
post #2

The article's fundamental argument is that using any separate service to sign in is a problem, and doesn't really distinguish between signing in with Google or signing in with Facebook, yet many products with a huge need for security (protecting PII of users) that I'm familiar with use Google sign-in. That seems to indicate a fatal flaw somewhere, either in the writer's understanding of Google sign-in, or the assumpt…

[deleted]

Re: Why You Shouldn’t Use Facebook to Log in to Other Sites

#8
Is there anywhere I can get a list of all the websites I've ever used my Facebook account to log in to? I know I've done it for some of them in the past, but I don't remember which, and if any of them are still websites that I might use, I want to switch them off Facebook login so I can finally delete my account (which I don't use for anything else).

Re: Why You Shouldn’t Use Facebook to Log in to Other Sites

#9

Is there anywhere I can get a list of all the websites I've ever used my Facebook account to log in to? I know I've done it for some of them in the past, but I don't remember which, and if any of them are still websites that I might use, I want to switch them off Facebook login so I can finally delete my account (which I don't use for anything else).

Settings > Apps and Websites > Expired
Post reply on HN