How Popular Is “Sign in with Apple”? • Hacker News Board

Re: How Popular Is “Sign in with Apple”?

#101

Post by izacus » Tue, Jan 28, 2020, 7:15 PM UTC

favorited wrote: post #91

pfranz wrote: post #82

Earlier quoted context omitted.

For this and many examples I think it's more ignoring those use-cases than maliciously blocking them. > For the longest time you couldn't even preview songs on iTunes store without having iTunes. I'm confused what the use case for this is? > Want to watch their biggest WWDC live? Had to use Safari until last year. Keynote streaming has had a long, weird history over the past decades. Even when Quicktime was dominant,…

> My understanding over the past decade or so has been they've used "standards" to stream, but just the standards Safari had implemented. It's just HLS, which Chrome didn't support

HLS can be rather readily supported with a JavaScript library that works just fine on Chrome.

Imagine if Google would just "forget" to keep supporting H.264 on YouTube and only served VP9 unsupported in Safari and iOS.

Re: How Popular Is “Sign in with Apple”?

#102

Post by burkaman » Tue, Jan 28, 2020, 7:17 PM UTC

dep_b wrote: post #78

habosa wrote: post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

> As an Android developer I have no reason to own either of those. Of course you do: Please implement this iOS application/feature in Android . Not being able to run an application from Xcode onto an iOS device severely hampers your career. I have to deal with so many Android developers and their output I absolutely cannot afford the luxury to not run Android apps from Android Studio. I don't think Sign In With Apple…

Anyone with a computer can get Android Studio for free in 5 minutes. You can't download a free iPhone.

Re: How Popular Is “Sign in with Apple”?

#103

Post by [deleted] » Tue, Jan 28, 2020, 7:17 PM UTC

reaperducer wrote: post #61

habosa wrote: post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

wanted the app to have the same options across platforms I guess this is the part I don't understand. How did you plan to test across platforms if you don't have an iOS device with which to test?

[deleted]

Re: How Popular Is “Sign in with Apple”?

#104

Post by alexhayes » Tue, Jan 28, 2020, 7:18 PM UTC

Does anyone have any thoughts on the security (or other) implications of all your email for services in which you sign up using Apple SignIn now being relayed through Apple's mail servers?

It seems like a great way for Apple to hoover up a heap information they probably don't need.

I also wonder how they are going to combat bounces and send back a usable error message. While they can perhaps do useful things with say a mailbox full bounce they are probably going to have to hide or at least obfuscate some other kinds of bounces.

Re: How Popular Is “Sign in with Apple”?

#105

Post by snowwolf » Tue, Jan 28, 2020, 7:18 PM UTC

capableweb wrote: post #22

jrochkind1 wrote: post #4

> It’s utterly private, where signing in with Google or Facebook is not at all, yet far more convenient than signing up with your email address. What is different in the privacy design of 'sign in with apple'?

As a application owner, I won't see the users email, instead Apple generates a unique address for each signup. That email also redirects any emails to the users email. For someone who doesn't like a lot of what Apple does, this is a really nifty feature. We just started integrating "Sign in with Apple" last week and are about to deploy it. Discovering the shielding of email addresses was a happy discovery, which I ha…

What happens when the customer contacts you for support and is using the shielded email service. You don't know the "real" email for the account, and the customer can't email you from the "shield" email. So you have limited means of verifying they are who they say they are. So how do you for disclose account information to them if you can't be sure they are the account owner?

Re: How Popular Is “Sign in with Apple”?

#106

Post by Andrex » Tue, Jan 28, 2020, 7:20 PM UTC

tusharsoni wrote: post #99

Developer of a recently launched app with Sign in with Apple here. I watched the keynote where they launched Sign in with Apple and was honestly surprised at how easy the implementation was. I thought it was a no-brainer to add it to my app. So, I follow their (severely lacking) docs and the keynote and get a solution working. Once the user logs in, their APIs hand you a token that you can then send to the server. Th…

What are the security implications of this?

Re: How Popular Is “Sign in with Apple”?

#107

Post by sul4bh » Tue, Jan 28, 2020, 7:20 PM UTC

ehsankia wrote: post #59

habosa wrote: post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

Apple continues to not give any care whatsoever to anything outside their walled garden. For the longest time you couldn't even preview songs on iTunes store without having iTunes. Want to watch their biggest WWDC live? Had to use Safari until last year. Obviously iMessage and FaceTime are complete no-gos outside their walled garden too. This is how they keep people in. They have to close down their walls as tightly…

I would rather have a delightful user experience than multi platform support. Worst service to ever come out of Apple is Apple Music because it is multi platform. Their desktop app is just a shell around their BETA web version. Sluggish UI, memory usage goes up to 4GB easily...They didn't even try...all in the name of making it easier to support multiple platforms.

Re: How Popular Is “Sign in with Apple”?

#108

Post by eropple » Tue, Jan 28, 2020, 7:23 PM UTC

criley2 wrote: post #97

dep_b wrote: post #78

Earlier quoted context omitted.

> As an Android developer I have no reason to own either of those. Of course you do: Please implement this iOS application/feature in Android . Not being able to run an application from Xcode onto an iOS device severely hampers your career. I have to deal with so many Android developers and their output I absolutely cannot afford the luxury to not run Android apps from Android Studio. I don't think Sign In With Apple…

This isn't really a fair comparison because any OSX user can just download and run Android studio for free, while your average Android programmer would require over a thousand dollars (to get a bottom-level Apple device with the worst specifications, or closer to two thousand+ to get competitive hardware) and then a yearly subscription to XCode at $100/year, and that's without having any actual iPhones to test on as…

You don’t need a subscription to test iOS code, FWIW.

Re: How Popular Is “Sign in with Apple”?

#109

Post by eropple » Tue, Jan 28, 2020, 7:25 PM UTC

pfranz wrote: post #88

azinman2 wrote: post #50

Earlier quoted context omitted.

Well, Sign In with Apple is different because: 1. It’s fast 2. It gives you a pseudonym 3. It doesn’t leak all your other social graph data 4. Doesn’t require a new password The rest are: 1. Faster than creating an email, but will require redirects, and possibly logging into fb/google 2. May give you a pseudonym but often reveals your real name 3. Are used typically to build profiles of you and create stats on app po…

Maybe it's just me, but one bummer about this kind of system is that's is A+ top security for a lot of stuff I don't care about. To create some account on a random forum to give feedback about how I got a stuck oil filter off of my '03 Civic, for example. With email+password I can just use a low security password because I'm typing on a phone. With these all-in systems my device isn't recognized so I'll need to type…

Even setting aside Sign In With Apple, why are you consuming mental space and energy with a reused password and whether they should be throwaways or not in 2020, when all mobile OSes and desktop browsers integrate seamlessly with password managers?

Over here, I just use Face ID and 1Password does the tedious filing-and-remembering part that computers are good at.

Re: How Popular Is “Sign in with Apple”?

#110

Post by wolco » Tue, Jan 28, 2020, 7:28 PM UTC

chrispeel wrote: post #95

cptskippy wrote: post #55

We have an on-going issue with Apple's protections going back almost a decade to when they started mucking about with 3rd Party Cookies. This isn't entirely their fault, blame also lies with the vendor we've chosen and our architecture for SSO. That being said, there are valid use cases for tracking users across websites. I work for a nonprofit that does fundraising using every imaginable PaaS or SaaS platform as wel…

> That being said, there are valid use cases for tracking users across websites. I work for a nonprofit ... Could you explain "valid use" more? I hope that you're not implying that we should allow all non-profits to track people across websites so they can do fundraising.

They have three domains and want one sign-in on one domain to login to all three.

Normally they write a cookie the other domains can read.