Live data from Hacker News

Don't use third party auth to sign in

gurjeet.singh.im

31–40 of 544 posts

Re: Don't use third party auth to sign in

#31

Earlier quoted context omitted.

Yeah. Reddit is especially really intrusive and annoying. I feel like they just don't want people to use their site anymore. Whenever I open new Reddit, my memory and CPU usage goes up so badly.

old.reddit.com.

Use a browser plugin like this to always use the old site: https://addons.mozilla.org/en-US/firefox/addon/old-reddit-re...

Re: Don't use third party auth to sign in

#32
post #9

Earlier quoted context omitted.

For that you have this: https://takeout.google.com/ You can export all your email in a single .mbox file. This might not work if your account is suspended, but if you set up email forwarding to an alternative address (e.g. to protonmail) that might still stay active so you can transition your addresses.

I wonder if Google lets you Takeout if they’ve locked your account…

If you are in the EU, GDPR says they have to.

Re: Don't use third party auth to sign in

#33
post #6

Has anyone else noticed random popups on 3rd party websites asking for google sign in? I even used firefox when it happened: https://imgur.com/a/JC52lBV (lequipe.fr) https://imgur.com/a/VSM3Uk9 (reddit.com) https://imgur.com/a/KpVCYBL (medium.com)

Yes, they've been showing up all over the place. Even on EBay.

I suspect some bizdev people at Google just had a "great idea".

Re: Don't use third party auth to sign in

#34
> "if Google (or third-party of your choice) locks your account for some reason, you will be locked out of all the services where you signed into using Google."

But if the account I'd use to sign in is my Gmail account, and they had locked that account, wouldn't I be locked out anyway?

Please explain it to me if I'm wrong (cause that happens often).

Re: Don't use third party auth to sign in

#35
We also offer multiple third-party signup solutions for our service in addition to "traditional" e-mail based signup. For every service we retrieve and store the users' e-mail address on our server (we also need that to e.g. send out invoices) and enable e-mail based login and password reset/generation by default (you can disable it or add 2FA), so your account will not be lost just because your OAuth provider blocks your credentials.

Re: Don't use third party auth to sign in

#36
post #5

To add to this: Never use a @gmail.com address, buy your own domain and pay the $6/mo to get a Google GSuite with your name@fullname.com address instead. If Google locks your account, you can now move your email hosting to another provider and won't lose access to your entire digital world. Be aware that doing this now means your DNS provider and domain registrar become vectors for hackers to take over your email acc…

Yeah but they’ve still got your emails.

Well, at least you don't lose everything. Worst case you lose access to a few emails you got in the time between begin locked out of your Google account and when you set up another email provider, and assuming you configured IMAP and use something like Thunderbird or K-9 as an email client (which I highly recommend) you should have a copy of all your email on your device (seriously don't use the Gmail app on Android, they even display ads in your email categories.

I like GMail for their spam filtering power, and I honestly believe spam to be email's biggest weakness, and the reason people don't host their own. It certainly scares me, the thought of being flooded with thousands of spam emails daily, or the chance that my own emails would be falsely marked as spam since I'm not part of the major providers or because I did not configure it correctly. Don't know how this can be solved though, email itself is too permissive, and too "tweakable".

Re: Don't use third party auth to sign in

#38

> "if Google (or third-party of your choice) locks your account for some reason, you will be locked out of all the services where you signed into using Google." But if the account I'd use to sign in is my Gmail account, and they had locked that account, wouldn't I be locked out anyway? Please explain it to me if I'm wrong (cause that happens often).

You'd be locked out of recovery emails, but not the service. You could potentially changed the email/username as long as you still had the login details.

Re: Don't use third party auth to sign in

#39
post #5

To add to this: Never use a @gmail.com address, buy your own domain and pay the $6/mo to get a Google GSuite with your name@fullname.com address instead. If Google locks your account, you can now move your email hosting to another provider and won't lose access to your entire digital world. Be aware that doing this now means your DNS provider and domain registrar become vectors for hackers to take over your email acc…

$6/month doesn't sound like much... Till you realise you'll probably have this setup for 20 years, and suddenly it's $1200. That's a lot to protect against a thing that will probably not happen (account being banned)

> That's a lot to protect against a thing that will probably not happen (account being banned)

$1,200 is a lot of money, but... anyone aged 23+ is older than Google. 17+ is older than GMail.

It is an illusion to say we know what will or will not happen to Google over the next 20 years. We don't know how entrenched the tech giants are over decades because we've never had anything like them before.

This is a problem that is obviously not going to happen in the next 12 months. But if a person don't control their email address, they shouldn't be using it for anything that it would really hurt to lose.

Re: Don't use third party auth to sign in

#40
post #5

To add to this: Never use a @gmail.com address, buy your own domain and pay the $6/mo to get a Google GSuite with your name@fullname.com address instead. If Google locks your account, you can now move your email hosting to another provider and won't lose access to your entire digital world. Be aware that doing this now means your DNS provider and domain registrar become vectors for hackers to take over your email acc…

$6/month doesn't sound like much... Till you realise you'll probably have this setup for 20 years, and suddenly it's $1200. That's a lot to protect against a thing that will probably not happen (account being banned)

$1200 of 20 years? I spend more than that on milk.
Post reply on HN