Live data from Hacker News

Facebook Asking for Some New Users' Email Passwords

thedailybeast.com

21–30 of 377 posts

Re: Facebook Asking for Some New Users' Email Passwords

#21

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

That's exactly how mint.com works, owned by Intuit/QuickBooks.

Re: Facebook Asking for Some New Users' Email Passwords

#22

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

Mint legitmatized that authorization flow years before Plaid came around and the banks decided that was the best way to move forward instead of adopting something like an oauth2 flow.

Re: Facebook Asking for Some New Users' Email Passwords

#23
post #21

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

That's exactly how mint.com works, owned by Intuit/QuickBooks.

Yeah back when ING still had a retail presence in the US they were notorious for not working well with Mint… because they required a mint specific access key and not your master credentials.

Re: Facebook Asking for Some New Users' Email Passwords

#24
post #14
post #9

In the old days didn't lots of people give their email passwords to Facebook, so that it can scan their contact and invite everyone to Facebook?

Not sure about them previously asking for email passwords, but there are many email APIs that can give permissions access to your contacts [0]. I don't doubt that in the older days of Facebook they were probably achieving this using some shadier methods. But worse than this, just by installing the Facebook App it liberally takes contact details from your device [1]. I personally use mbasic.facebook.com as it can run…

I didn't know about mbasic facebook, it is awesome! Thank you. It even works the chat without needing to put the phone in desktop mode.

Re: Facebook Asking for Some New Users' Email Passwords

#25

I dont know why anyone with any commonsense still uses Facebook, Instagram or Twitter. They're completely uncontrolled nonsense that I wouldn't trust with my email address. Let alone my phone number. Call me crazy or socially inept, but I value privacy.

You mention both common sense and personal values. I think it’s much more likely that people have different personal values than you than that people have less common sense than you.

Re: Facebook Asking for Some New Users' Email Passwords

#26

https://www.axios.com/facebook-will-stop-asking-new-users-fo... Facebook told Axios that "a very small group of people have the option of entering their email password to verify their account when they sign up for Facebook," but noted that people could choose instead to confirm their account with a code or link sent to their phone or email. "That said, we understand the password verification option isn't the best way…

And so what if they are going to stop? Why were they offering it in the first place? It is such an obviously terrible idea

Re: Facebook Asking for Some New Users' Email Passwords

#27
post #12

Earlier quoted context omitted.

As much as I dislike what Instagram “is”, it is pretty much the best platform for (non-public) photo sharing. If there was something better, I’d use it, but there is not.

Maybe I'm jaded, but I only share photos of my life via text or even sd card. No one needs to see my life, besides it's kinda boring. Even if my boring life means I shouldn't be worried about it being exposed, I dont want that out there. I dont know maybe I'm just weird hahah.

I don't think there's anything weird about that at all.

But suppose you did want to publish your content. For instance I make videos about tech and programming that I enjoy sharing with others and getting feedback on, so I post them on YouTube. Some people like to do that with their selfies or political commentary. To me that's all fine as long as they understand that it's no longer private.

The bigger privacy violations, imo, are the hidden ones. The web trackers, IoT data collection, location services, conversation metadata, etc. These are situations where it's not "public" like YouTube or Twitter, but it sure isn't private either.

Re: Facebook Asking for Some New Users' Email Passwords

#28

Earlier quoted context omitted.

Maybe I'm jaded, but I only share photos of my life via text or even sd card. No one needs to see my life, besides it's kinda boring. Even if my boring life means I shouldn't be worried about it being exposed, I dont want that out there. I dont know maybe I'm just weird hahah.

Amateur photographer here, Instagram is invaluable. Post only what you want the world to see, and so on...

Are you an amateur photographer? Or are you someone who posts images to a social media website for a dopamine hit?

Perhaps there’s a value to gatekeeping. It can make us actually put effort and consideration into things. Modern web services like Instagram have allowed human fantasies to run wild, completely detached from reality. If you truly cared about your art and wanted it to be seen, you would devote yourself to that and work on getting into a gallery, or set up your own website. Instead you retreat to a fantasy world of online likes where you feel legitimized as an artist with zero real effort, and zero care or true appreciation on the audience’s part.

Re: Facebook Asking for Some New Users' Email Passwords

#29
post #25

I dont know why anyone with any commonsense still uses Facebook, Instagram or Twitter. They're completely uncontrolled nonsense that I wouldn't trust with my email address. Let alone my phone number. Call me crazy or socially inept, but I value privacy.

You mention both common sense and personal values. I think it’s much more likely that people have different personal values than you than that people have less common sense than you.

Maybe they're just inept? I'm definitely no genius.

Re: Facebook Asking for Some New Users' Email Passwords

#30

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

Plaid might be my least favorite company ever. It's such a privacy nightmare and they do not even tell you basic information about what you are sharing (or how to revoke sharing rights) going through their typical flow on some random fintech app. If you look at their website, you could be giving away just the bank and routing number, or potentially your entire bank transaction history, balance, identity information, etc. and have no idea. It's terrible and could never recommend ever using an app that forced you through that flow.

They need to be exposed. Or sued.

Post reply on HN