Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Don't use third party auth to sign in

gurjeet.singh.im

Post reply on HN
Print view View original

251–260 of 544 posts

Re: Don't use third party auth to sign in

#251

Post by dageshi »

severino wrote: post #240
dageshi wrote: post #221

Earlier quoted context omitted.

Register your own domain and point it at your preferred service, if you lose access to that service you still retain the domain and you still have your email address. If you want to solve this problem you have to spend some money somewhere otherwise you are simply demanding providers give you services, for free, forever, not something that seems realistic?

But can't the same problem happen if you, somehow, lose the ownership of your domain? I mean, I don't know what the actual assurances are, but if there is any chance that you may lose access to your domain (for causes other than forgetting to pay to renew, ofc), even temporarily, that would be the same as being banned from Google. Or even worse, because having your Google account locked means you can't use it but noo…

I think that is very very uncommon and when it does happen there's usually some kind of legal process involved. In other words I don't think you're going to have your domain yanked away without some reasonable amount of warning and ability to dispute.

In the worst case scenario you'd have time to setup a new domain and move everything over. Annoying yes, but again extraordinarily rare.

Re: Don't use third party auth to sign in

#252

Post by syshum »

aboringusername wrote: post #125

I'm honestly not sure where we went so wrong as a society so as to reach this point. Whether it's overzealous AI or the AMPification of the web. Google act with impunity and without remorse, every action designed to further their goals and agendas without respect to humans caught in the crossfire. If Google can, without due process and fair warning, remove your existence then this is a power that should be delegated…

>>I'm honestly not sure where we went so wrong as a society so as to reach this point.

As with all things, Education is where we went wrong as a society.

in this case failing to teach people fully that there is no Free Lunch, and if you are getting something no cost to you, then you are no longer the customer, who ever is paying for the good or service is the customer (people should also pay attention to this truism in other area's of life)

In the case of google, you are the product, you are being sold to advertisers, google gives you a very very very small piece of that revenue in the form of a "free service"

Re: Don't use third party auth to sign in

#253

Post by twirlock »

bookofjoe wrote: post #242
anvandare wrote: post #143

Earlier quoted context omitted.

The speed of technological development is faster than the speed of societal or legal development. So yes, right now we've woken up in a world that is not so much cyberpunk as it is techno-feudalism: more and more do you need a presence on the Internet to do things in meatspace... And that presence is by the grace of several feudal lords (Google foremost) - woe betide you should you ever displease them. You do not rea…

See also: Kindle books; movies "purchased" from Amazon, Apple, et al; Tesla upgrades you paid extra for; I could go on....

No actually none of that is remotely comparable to the influence Google wields over our lives.

Re: Don't use third party auth to sign in

#254

Post by GavinMcG »

nstj wrote: post #153
GavinMcG wrote: post #133

Earlier quoted context omitted.

Legal services can get involved just fine if you file suit. You'll just have to establish that Google owed a duty to you (by contract or otherwise) and that you were harmed by their breach of that duty. (Roughly. I am not a lawyer.)

The point of the comments here is that $BIGCO is outside of the law from a risk measured standpoint (ie: they’ll bankrupt you if you fight them given their bigger bankroll).

I think that's likely mythical thinking, and not something based in data. It's fairly common for plaintiff-side lawyers to work on contingency when they believe you have a case.

Less likely here, given the somewhat unexplored territory, but still, the history of class-action litigation evolution is largely of lawyers/firms taking a chance such as this.

Re: Don't use third party auth to sign in

#255

Post by devdas »

andrepd wrote: post #65
forgotpwd16 wrote: post #62

Earlier quoted context omitted.

For those that don't want to pay, Yandex allows you to set up a number of emails using your own domain for free.

The only thing worse I can think than having Google read your email is having Yandex read it.

If you aren't in the US, then Yandex is probably safer.

Re: Don't use third party auth to sign in

#256

Post by ffpip »

mcjiggerlog wrote: post #193
Fnoord wrote: post #70

Earlier quoted context omitted.

Doesn't work on Firefox Android. I never go to Reddit by typing URL; I go to Reddit because I follow a link to it.

Creator of the extension here. It actually does work on Android, it's just not in the (very short) list of allowed extensions yet. There is a workaround to add custom addons, though: https://github.com/tom-james-watson/old-reddit-redirect/issu...

Thanks for making this. It's useful every time I click a new reddit link.

Re: Don't use third party auth to sign in

#257

Post by hunter2_ »

Kudos wrote: post #189
ekianjo wrote: post #182

Earlier quoted context omitted.

> Yet here it is. Google can offer their services and the legal system seemingly doesn't want to be involved. Why ? The real question is why do people use Google to sign in to other services? It never even crossed my mind no matter how long I have had a Google account.

For similar reasons that you and I use password managers, but add lower friction to the mix.

One could even eliminate those same tasks (not wanting to remember a new password, and not wanting to use a password manager) by setting an unmemorable password and doing a password reset using a Gmail address every time they want to log in. "Log in using Google" basically does that same sort of thing but without the tedium of all the clicking/typing. The mechanism is much different but in terms of dependencies it's really the same.

Re: Don't use third party auth to sign in

#258

Post by sthm »

grezql wrote: post #6

Has anyone else noticed random popups on 3rd party websites asking for google sign in? I even used firefox when it happened: https://imgur.com/a/JC52lBV (lequipe.fr) https://imgur.com/a/VSM3Uk9 (reddit.com) https://imgur.com/a/KpVCYBL (medium.com)

This is a real problem. One would think that a respectable site would give us the option to recover via email, but that is not the case. I had this exact issue with Kobo yesterday, I'm forced to use Facebook login even though they have my email as a recovery option.

Re: Don't use third party auth to sign in

#260

Post by knuthsat »

aboringusername wrote: post #125

I'm honestly not sure where we went so wrong as a society so as to reach this point. Whether it's overzealous AI or the AMPification of the web. Google act with impunity and without remorse, every action designed to further their goals and agendas without respect to humans caught in the crossfire. If Google can, without due process and fair warning, remove your existence then this is a power that should be delegated…

I don’t see what’s lost if Google disabled my account. Yeah, photos, emails and similar but that is not really life changing.

I’m not saying it’s an unworthy cause to advocate a change but I’m just not seeing the moral weight compared to factory farming, and other hard industries that have an effect on societies and the planet.

Post reply on HN