Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Don't use third party auth to sign in

gurjeet.singh.im

Post reply on HN
Print view View original

281–290 of 544 posts

Re: Don't use third party auth to sign in

#281

Post by wolco2 »

ravenstine wrote: post #266
aboringusername wrote: post #125

I'm honestly not sure where we went so wrong as a society so as to reach this point. Whether it's overzealous AI or the AMPification of the web. Google act with impunity and without remorse, every action designed to further their goals and agendas without respect to humans caught in the crossfire. If Google can, without due process and fair warning, remove your existence then this is a power that should be delegated…

Because we were making money . When I got started programming full time, tons of people in the software industry were getting their rocks off on how simple it is to install an Oauth library, making it easy as pie for people to sign in to a web service, thus encouraging more sign ups and making more money. Maybe we've forgotten just how much of a hard-on we and the entire world once had for the likes of Google. 8 year…

Your generation might be guilty. But those that came before and after knew better. This is the generation who thought using their real names online was a good idea. That's where things went wrong.

Never in my life did I see an Oauth libruary and think this is easy as pie. Overcomplicated perhaps.

Re: Don't use third party auth to sign in

#282

Post by NetOpWibby »

anvandare wrote: post #143
aboringusername wrote: post #125

I'm honestly not sure where we went so wrong as a society so as to reach this point. Whether it's overzealous AI or the AMPification of the web. Google act with impunity and without remorse, every action designed to further their goals and agendas without respect to humans caught in the crossfire. If Google can, without due process and fair warning, remove your existence then this is a power that should be delegated…

The speed of technological development is faster than the speed of societal or legal development. So yes, right now we've woken up in a world that is not so much cyberpunk as it is techno-feudalism: more and more do you need a presence on the Internet to do things in meatspace... And that presence is by the grace of several feudal lords (Google foremost) - woe betide you should you ever displease them. You do not rea…

OT: Please tell me you have a blog, I enjoy the way you write.

—

I run my own mail server but my VPS provider could be coerced to yank it from me. You’ve made me uncomfortable with revelations. Damn, we’re fucked.

Re: Don't use third party auth to sign in

#283

Post by tehjoker »

tmd83 wrote: post #264
anvandare wrote: post #143

Earlier quoted context omitted.

The speed of technological development is faster than the speed of societal or legal development. So yes, right now we've woken up in a world that is not so much cyberpunk as it is techno-feudalism: more and more do you need a presence on the Internet to do things in meatspace... And that presence is by the grace of several feudal lords (Google foremost) - woe betide you should you ever displease them. You do not rea…

I liked the term too. If you are large and powerful, you are the law and whatever you say works. Hopefully as society matures we learn to establish some form of rules/laws that are sane and empower people. But in every society a small circle of privileged people have always been the norm and despite more wider access to information today it seems like consolidation of power and wealth seems to be trending upward.

Rules aren't worth the piece of paper they're printed on unless there is an equally powerful force that can set terms. The problem right now is there is no counterbalancing force.

Re: Don't use third party auth to sign in

#284

Post by TravisLS »

beagle3 wrote: post #265
pbronez wrote: post #235

Perhaps the courts could be helpful here. A long-established Google account has significant value to the user. If Google terminates such an account, value is destroyed and damages are incurred. You should be able to demonstrate the value of the lost account to a court and demand restitution from the host. If successful, this would impose a cost to Google for shutting down accounts capriciously and incentivize them to…

If successful, google will terminate all free accounts, as will every other free provider (... which will not necessarily be a bad thing)

I doubt it. These lawsuits would be few and far between and Google still derives a ton of value from its free accounts in the aggregate. They might just get better at terminating the right accounts...

Re: Don't use third party auth to sign in

#285

Post by NetOpWibby »

bookofjoe wrote: post #242
anvandare wrote: post #143

Earlier quoted context omitted.

The speed of technological development is faster than the speed of societal or legal development. So yes, right now we've woken up in a world that is not so much cyberpunk as it is techno-feudalism: more and more do you need a presence on the Internet to do things in meatspace... And that presence is by the grace of several feudal lords (Google foremost) - woe betide you should you ever displease them. You do not rea…

See also: Kindle books; movies "purchased" from Amazon, Apple, et al; Tesla upgrades you paid extra for; I could go on....

This is precisely why I buy vinyl or music from Bandcamp, and choose the disc version of the PS5.

I view my digital purchases as things I am forever renting.

Re: Don't use third party auth to sign in

#286

Post by Aeolun »

bookofjoe wrote: post #242
anvandare wrote: post #143

Earlier quoted context omitted.

The speed of technological development is faster than the speed of societal or legal development. So yes, right now we've woken up in a world that is not so much cyberpunk as it is techno-feudalism: more and more do you need a presence on the Internet to do things in meatspace... And that presence is by the grace of several feudal lords (Google foremost) - woe betide you should you ever displease them. You do not rea…

See also: Kindle books; movies "purchased" from Amazon, Apple, et al; Tesla upgrades you paid extra for; I could go on....

I have yet to hear about the first amazon account ban.

I don’t think they’re really interested in that, since the accounts are almost by definition making them a bunch of money.

Re: Don't use third party auth to sign in

#287

Post by gspr »

IanCal wrote: post #190
ekianjo wrote: post #182

Earlier quoted context omitted.

> Yet here it is. Google can offer their services and the legal system seemingly doesn't want to be involved. Why ? The real question is why do people use Google to sign in to other services? It never even crossed my mind no matter how long I have had a Google account.

I don't want more accounts and passwords. The security seems strictly worse than just authenticating against my email provider directly.

There's no good reason not to use a password manager in 2020. I recommend this one: https://www.passwordstore.org/

Re: Don't use third party auth to sign in

#288

Post by pferde »

bogomipz wrote: post #73
sneak wrote: post #51

Earlier quoted context omitted.

This is such excellent advice that I wrote a detailed step-by-step instruction guide for people that don't know how to do precisely that: https://sneak.berlin/20201029/stop-emailing-like-a-rube/ It even has special instructions about how to secure the domain registration and DNS accounts. :) (Don't use G Suite, though.)

I have attempted to read two articles on your site. As I am a privacy-focused person the articles were of interest to me. Both times I haven't gotten past reading the opening sentences when an obnoxious pop-up appeared asking for my email address. It seems ironic that someone publishing articles on privacy advocacy would be so keen to collect my email address. This practice also creates a real miserable experience an…

Yes, asking for an e-mail for site-update-sending purposes is very sketchy. That's what RSS is for, just publish a feed like a good netizen.

And indeed, your site does have a RSS feed, so what's with the e-mail address collecting? Rude!

Re: Don't use third party auth to sign in

#289

Post by wolco2 »

JumpCrisscross wrote: post #186
Spooky23 wrote: post #159

Earlier quoted context omitted.

US national politics. One party is in bed with the copyright owners, the other doesn’t believe that the government should govern. Google fills the gap.

> One party is in bed with the copyright owners, the other doesn’t believe that the government should govern This political model is dated. Republicans are no longer conservative. And Democrats have an ascendant progressive wing that rejects corporate influence wholesale.

They will milk you for your vote but when power is won you will be excluded. Look at what happened last week on the leaked conference call. Progressives were blamed for losing so many house/senate races.

Re: Don't use third party auth to sign in

#290

Post by bcrl »

blfr wrote: post #225
aboringusername wrote: post #125

I'm honestly not sure where we went so wrong as a society so as to reach this point. Whether it's overzealous AI or the AMPification of the web. Google act with impunity and without remorse, every action designed to further their goals and agendas without respect to humans caught in the crossfire. If Google can, without due process and fair warning, remove your existence then this is a power that should be delegated…

Because a house is significantly more important than an email address. I get being extremely online but let's not be silly here. Plus that email/account is hardly even "yours" in a serious way. Anyone on the HN has a very simple fix for all these problems: get an email in your domain and a password manager for all the accounts. There, solved. You could even still use Gmail with their Google Apps, G Suite, Workplace o…

Telecom regulators see fit to make sure phone numbers can be ported from one carrier to another. I fail to understand why the same mandate is not required for email addresses and authentication services. They might not look to be as important as a house, but their loss can still have quite a significant impact on someone's livelihood.
Post reply on HN