Apple forced some of the companies that rely on Apple’s platform iOS or MacOS to implement this feature, how is that not anti-trust?
How Popular Is “Sign in with Apple”?
111–120 of 340 posts
Re: How Popular Is “Sign in with Apple”?
#112I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…
Apple continues to not give any care whatsoever to anything outside their walled garden. For the longest time you couldn't even preview songs on iTunes store without having iTunes. Want to watch their biggest WWDC live? Had to use Safari until last year. Obviously iMessage and FaceTime are complete no-gos outside their walled garden too. This is how they keep people in. They have to close down their walls as tightly…
Isn't this kind of in the DNA of the company? Even going back to its first decade, what distinguished Apple from other early PC companies was that its O/S was only meant to run on its hardware, and its hardware was only meant to run its O/S.
This obviously didn't work out for it in the late 80's and 90's. But its fortunes changed by the mobile device era. One challenge of this model is that you have to maintain execution excellence in not one, but two separate areas. Both your hardware and design execution, as well as your software engineering, have to be industry leading. If either one falls short, it brings down the other.
Re: How Popular Is “Sign in with Apple”?
#113Earlier quoted context omitted.
Sign in with Apple has the advantage that the service on the other side of the auth window doesn't get to see you actual email address. They're provided instead with an anonymized email address from Apple that serves as a forwarding address for you. It's also easy in general to revoke permissions with these SSO providers rather than dealing with whatever the service's account cancellation protocol is.
What’s cool about that anonymized email address is that even if it gets leaked, only the registered service can use it to communicate with you.[1] [1] https://support.apple.com/en-au/HT210318
Does this just cement you too apple? I'm assuming if you lose your Apple address, you have lost all linked addresses?
Re: How Popular Is “Sign in with Apple”?
#114We have an on-going issue with Apple's protections going back almost a decade to when they started mucking about with 3rd Party Cookies. This isn't entirely their fault, blame also lies with the vendor we've chosen and our architecture for SSO. That being said, there are valid use cases for tracking users across websites. I work for a nonprofit that does fundraising using every imaginable PaaS or SaaS platform as wel…
That being said, there are valid use cases for tracking users across websites. Strong disagree. It works for the most part everywhere except Safari where a few of our integrations just cannot and will not work due to their use of 3rd Party Cookies. It sucks to have sunk so much time and effort into a solution only to have external factors render it unworkable, and I feel for you. But it is entirely possible to implem…
Of course it's easy and we all have a fav sso projects but if you do not control the code it may not be possible
Re: How Popular Is “Sign in with Apple”?
#115Developer of a recently launched app with Sign in with Apple here. I watched the keynote where they launched Sign in with Apple and was honestly surprised at how easy the implementation was. I thought it was a no-brainer to add it to my app. So, I follow their (severely lacking) docs and the keynote and get a solution working. Once the user logs in, their APIs hand you a token that you can then send to the server. Th…
What are the security implications of this?
The biggest one is that you're essentially trusting data that the client is providing (Apple gives user id to the client and the client sends it to the server). Unless you can verify the token and exchange it for your own session id, you're opening up your users to be easily impersonated (if they get a hold of the user id).
Other than that, Apple also provides server-side verification for the validity of the token. Without that, the client could send a random string and the server wouldn't know the difference.
Re: How Popular Is “Sign in with Apple”?
#116Earlier quoted context omitted.
> My understanding over the past decade or so has been they've used "standards" to stream, but just the standards Safari had implemented. It's just HLS, which Chrome didn't support
I’ve long wondered why Chrome doesn’t support HLS (HTTP Live Streaming for those who don’t know) given that it’s been standardized for a while. I get that we’ve got stuff like MPEG DASH and Web RTC now and so the use case for HLS is mostly fulfilled, but having a couple different options for streaming live video with low latency to massive audiences is nice and allows folks like me who have worked in this space to of…
[deleted]
Re: How Popular Is “Sign in with Apple”?
#117I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…
You’re an engineer who wants to implement Apple features, yet you don’t want to spend maybe, what, $200 for a test phone? These kinds of complaints are really irritating and disingenuous. My interpretation is that you’re more interested in complaining and finding problems than just buying a test phone and being done with it. It’s not that hard.
Re: How Popular Is “Sign in with Apple”?
#118As a user, won't i
a) share my data with Apple (i.e. they get to know every time i sign in) and
b) makes me dependent on Apple (what happens to my account when i sell all my Apple devices?) ?
Re: How Popular Is “Sign in with Apple”?
#119out of the 3 (google, fb , and apple) , having a fake FB profile is probably the best for my privacy. While FB may have tracked me they probably dont know my real name, while for apple it's mandatory, and most people probably have used their CC details with google at some point, plus these companies have my realtime location data as well. None of these systems are really private and it is a lie to tell our users that it is.
That said, SSO logins are replacements for passwords, not usernames. You should always ask users for their email afterwards if you don't want to be bound to the service's whims who may decide to block you from their service or impose weird terms in the future, like how FB requires various forms of verification / interrogation to continue using their platform.
Re: How Popular Is “Sign in with Apple”?
#120Earlier quoted context omitted.
When I used the feature with Byte it gives you the option whether you wish to mask your email address or send your real email address.
Is this on Apple's side of the authentication? Because if you implement the web version (on a non-Apple device) and login with credentials, you don't seem to get a choice, it always uses a masked email address.
Yeah, gives you a choice when you login with iOS.