Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple Sign In

techcrunch.com

Post reply on HN
Print view View original

271–280 of 544 posts

Re: Apple Sign In

#271

Post by countbackula »

"Apple says it can authenticate a user using Face ID on their iPhone without turning over any of their personal data to a 3-p company."

So is this feature exclusive to Face ID and iPhone? Would users, Face ID enabled or not, be able to use it with only their iCloud email/ID? And would older iPhone models incapable of FaceID still be eligible?

These may be just questions of a skeptical mind, but I really hope Apple isn't using a pro-user, pro-privacy feature to phase users out of older models.

Re: Apple Sign In

#272

Post by djrogers »

basch wrote: post #216
ben509 wrote: post #112

Earlier quoted context omitted.

PMs don't make it easy, they make it reliable and central. The default password generation usually doesn't work, and a web form doesn't capture everything, but I'm never clicking and guessing even when I haven't used an account in years. But SSO wins on mobile, because the PM is clunky even with a custom keyboard. Even then, I keep a dummy entry in my PM just so I'm tracking it.

Mobile Dashlane and Lastpass work much better on Android, where the OS allows you to set default apps. If Apple deserves any antitrust spankings its for not allowing user control of protocol handlers and default programs.

iOS allows you to set your default password manager...

Re: Apple Sign In

#273

Post by mindgam3 »

damnyou wrote: post #246
mindgam3 wrote: post #215

Earlier quoted context omitted.

True. Apple definitely playing the long game here, effectively. When iMessage came out I totally didn't see it ever becoming a viable identity play. But with all these privacy concerns, now it feels like the one to beat.

How can I access iMessage from my Linux laptop?

Not sure if that's possible. iMessage is a mobile first product, so presumably you need an iPhone to start using it. Then a Mac computer. It's definitely a closed system that works great if you buy into Apple's family of products, less great otherwise.

Re: Apple Sign In

#274

Post by maxheadroom »

criddell wrote: post #255
maxheadroom wrote: post #228

Earlier quoted context omitted.

> It can't be traced back to your account... I'm sure there's logging or other AD property (think something like sidHistory[0]) to keep track of this. Companies don't like being liable for not being able to provide data under order[s]. [0] - https://docs.microsoft.com/en-us/windows/desktop/ADSchema/a-...

What liability is there for not providing data you don't have?

In some countries, it's fiscal liability - such as paying hefty fines. In others, that are not so friendly, the HR representative who receives/processes the legal request and/or whomever the country wishes to charge could very well land in jail[0].

In a choice between strictly maintaining your privacy and fines/jail time, most - if not all - companies will sell you down the river (if given a feasible chance that it doesn't entirely ruin them, say for example, if they weren't purely in the privacy trade) to save their own hide[s] (e.g.: see the whole PRISM scandal and its fall-out).

[0] - https://www.reuters.com/article/us-facebook-brazil-idUSKCN0W...

Re: Apple Sign In

#275

Post by dcbadacd »

Unfortunately there's no way to implement this as a OAuth2 flow and without having an Apple device. Seems unreasonable to require an Apple dev account just for providing sign up - it can be tested without installing apps or just borrowing an iPhone.

Re: Apple Sign In

#276

Post by pat2man »

basch wrote: post #208
gigatexal wrote: post #175

This single feature shown off today at WWDC has solidified my forever lock-in on all things Apple and especially iOS: no longer will my email be sold needlessly or be spammed and my logging into to different web properties sold to marketers and ad networks and data aggregators. I trust Apple a whole lot more becaUe they charge and arm-and-a-leg for high end hardware and soon services because the products and services…

As soon as Keychain can abstract away passwords completely (rando generation, never need to show the user the password), so an end user cant tell if a site supports Apple SSO or if Apple is just emulating SSO, Apple deserves to be crowned the Identity Winner.

There is a session on WebAuthN on Thursday.

Re: Apple Sign In

#277

Post by Angostura »

gigatexal wrote: post #175

This single feature shown off today at WWDC has solidified my forever lock-in on all things Apple and especially iOS: no longer will my email be sold needlessly or be spammed and my logging into to different web properties sold to marketers and ad networks and data aggregators. I trust Apple a whole lot more becaUe they charge and arm-and-a-leg for high end hardware and soon services because the products and services…

Actually - does it lock you in, in a more literal way.

If I sign up for a service using Apple Sign In, is then possible to sign into my account from a Windows etc machine subsequently?

Re: Apple Sign In

#278

Post by dcbadacd »

moduspol wrote: post #25
hk__2 wrote: post #16

I can already see devs implementing things such as `if email domain ends in privaterelay.appleid.com reject the email address and ask for a "real" one`, like what already exists for yopmail and others.

Such a dev would likely just not implement "Sign in with Apple". This is for the devs that specifically want the minimal-friction sign-in.

Some screenshots display that it also works on the web, I'd love to find out how exactly but I ain't buying an Apple device and a developer license for that.

Re: Apple Sign In

#279

Post by dcbadacd »

basch wrote: post #216
ben509 wrote: post #112

Earlier quoted context omitted.

PMs don't make it easy, they make it reliable and central. The default password generation usually doesn't work, and a web form doesn't capture everything, but I'm never clicking and guessing even when I haven't used an account in years. But SSO wins on mobile, because the PM is clunky even with a custom keyboard. Even then, I keep a dummy entry in my PM just so I'm tracking it.

Mobile Dashlane and Lastpass work much better on Android, where the OS allows you to set default apps. If Apple deserves any antitrust spankings its for not allowing user control of protocol handlers and default programs.

Bitwarden seems to work quite nicely as well but in addition to that Bitwarden is open-source.

Re: Apple Sign In

#280

Post by damnyou »

mindgam3 wrote: post #273
damnyou wrote: post #246

Earlier quoted context omitted.

How can I access iMessage from my Linux laptop?

Not sure if that's possible. iMessage is a mobile first product, so presumably you need an iPhone to start using it. Then a Mac computer. It's definitely a closed system that works great if you buy into Apple's family of products, less great otherwise.

I know it's impossible. Since I don't have any Apple phones iMessage is useless for me. The vast majority of people in the world are similar to me.

Apple's products are not a play for anything. Their services are built for people with more money than sense.

Post reply on HN