Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

If you care about user privacy, don’t use Facebook JavaScript SDK

simplelogin.io

Post reply on HN
Print view View original

31–40 of 105 posts

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#31

Post by StreamBright »

r_singh wrote: post #4

Original article from Dev.to: https://dev.to/simplelogin/if-you-care-about-user-privacy-do... I've recently implemented authentication for my project and I would just like to say to all the relatively amateur programmers out there: for web based authentication just stick with HTTPOnly SECURE cookies with DB backed sessions that you can revoke. The reason I'm saying this is that there's way too many posts talking abou…

Do you think that registration can include solutions like Github? I am not sure how to handle after. Login with the 3rd party would trigger a http only secure cookie creation and insertion into the db? I want to avoid JWT and co. especially after watching so many videos about the downsides and the potential security implications.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#32

Post by StreamBright »

mikro2nd wrote: post #18
emmaglossy wrote: post #14

Earlier quoted context omitted.

Sometimes you don't really have a choice if all your friends and family use Facebook...

No. Really. You do have a choice. Exercising unpopular choices frequently requires a spine.

I explicitly told everybody that I turned off messenger notifications on every device and uninstalled facebook from my devices years ago. If they want to reach me they can use Signal, Telegram or Keybase. Interestingly enough even my mother (in her 70s, no idea about computers) can use Telegram without a hickup. I guess it is a matter of dedication to push your peers off from Facebook.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#33

Post by taneq »

StreamBright wrote: post #32
mikro2nd wrote: post #18

Earlier quoted context omitted.

No. Really. You do have a choice. Exercising unpopular choices frequently requires a spine.

I explicitly told everybody that I turned off messenger notifications on every device and uninstalled facebook from my devices years ago. If they want to reach me they can use Signal, Telegram or Keybase. Interestingly enough even my mother (in her 70s, no idea about computers) can use Telegram without a hickup. I guess it is a matter of dedication to push your peers off from Facebook.

> If they want to reach me they can use Signal, Telegram or Keybase.

Maybe even... gasp SMS. Or "telephone".

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#34

Post by StreamBright »

taneq wrote: post #33
StreamBright wrote: post #32

Earlier quoted context omitted.

I explicitly told everybody that I turned off messenger notifications on every device and uninstalled facebook from my devices years ago. If they want to reach me they can use Signal, Telegram or Keybase. Interestingly enough even my mother (in her 70s, no idea about computers) can use Telegram without a hickup. I guess it is a matter of dedication to push your peers off from Facebook.

> If they want to reach me they can use Signal, Telegram or Keybase. Maybe even... gasp SMS. Or "telephone".

Sure but there are places like Berlin in Germany where network coverage is absolutely broken. Wifi works though. This is why the preference over SMS/GSM call.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#36

Post by Jamwinner »

diminoten wrote: post #35

Who cares what I care about, the real question is what do my users care about. It all depends on what users will tolerate in the name of convenience.

If you think deferring ethics to the customer clears your conscience, you need some self examination.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#37

Post by diminoten »

mikro2nd wrote: post #29
thsealienbstrds wrote: post #23

Earlier quoted context omitted.

Individually, you have a choice. But not using e.g. WhatsApp needs to be a collective decision or it won't work because everybody else is still stuck in there.

There is no such thing as a "collective decision". There is only the decision of each person. Any movement to quit these sickness-inducing manipulators has to start somewhere otherwise you end up like those Buddhists who won't enter Nirvana until all other creatures are also ready to enter Nirvana, so they all end up hanging about outside the gates (as it were...), forever waiting. The decision to be the first,... to…

You're acting like we can't use multiple systems, or that people care if they can interact with us...

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#38

Post by diminoten »

valona wrote: post #7

Why would any developer or engineer who has even an iota of consideration for privacy, web standards, and, indeed, humanity want to work for such a repugnant company as Facebook?

Features, userbase, talent; the same reasons a developer or engineer would work with any company.

Let's play a game; how many degrees separated from Facebook is HN and YC? You go first, take a guess!

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#39

Post by tr33house »

I thought this was more commonly known... In terms of understanding browser history, The Facebook like button and Google's ad pixels and Chrome web browser are perhaps the biggest offenders. I'd argue that they were specifically created for the express purpose of collecting more user information - for better ad targeting and whatever else

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#40

Post by diminoten »

Jamwinner wrote: post #36
diminoten wrote: post #35

Who cares what I care about, the real question is what do my users care about. It all depends on what users will tolerate in the name of convenience.

If you think deferring ethics to the customer clears your conscience, you need some self examination.

Ethics?

The problem is practical; do your users want the features or do they care about privacy? Let them make the choice, and don't hide it from them. That's the ethical behavior.

It's unethical to assume everyone values everything the same, including privacy. Some people don't care about it as much as you do, nor should they.

Post reply on HN