221–230 of 319 posts
Article: web3 solves decentralized auth, and you are now in control! Also article: to use it, you need to trust a centralized entity like Metamask that develops your Chrome extension and some unknown programmers that code some "smart contracts" aka unverifiable code in esoteric programming languages. Also article: look! a solution! it's better!
So now I have to manage not only my own key, but they keys of any of my friends who want me to vouch for them every time they lose their phone? No thank you.
So what happens when you get phished with Web3? If the value of all crypto goes down 10% YoY why would you use it? The author makes a bunch of silly assumptions: > We need some way of saying “who we are” on the internet in a consistent manner. That way we can communicate with others in a verified way and associate with digital data that we own. We also often need that data to be interoperable between different web pr…
> No, this is not true. That's why most people on this site are not logging in through Google. Sites will store their own data, and if you trust them to store that data there’s really no reason to just trust them to store a link to your identity. You're missing the point. Yes, we don't need oAuth to log into HN. But HN is a site that is over 15 years old, and reflects the technology of its time. Instead, look at the…
Even if HN used oAuth - even if they required oAuth - ultimately oAuth, oAuth as implemented on most sites is just a thin layer over email so you don't have to make another account.
The problem doesn't require blockchain as a solution. What would the website administrator gain from accepting a blockchain login? People would create accounts but you have no way of contacting them since you have no email. Clearly the kinds of sites you're describing wouldn't accept that.
OK so you associate an email with your blockchain login - so now it's the same as the status quo. What's the point?
Earlier quoted context omitted.
if I run an online service, and you login with web3, if you're an asshole, I can still ban your "indelible" account
Web3 services will be run by assholes for assholes so they won't need to ban anyone.
Earlier quoted context omitted.
Well I thought I explained it effectively, but there are numerous scenarios where you'd want to use the same identity across multiple services, cross sharing of data, provable rights, etc. But that doesn't mean you're limited to one, or that you want to use it for every service you use. The benefit doesn't disappear, the benefit only applies when you want it. It isn't all or nothing.
You just described OAuth/OIDC.
> We need some way of saying “who we are” on the internet in a consistent manner. That way we can communicate with others in a verified way and associate with digital data that we own. We also often need that data to be interoperable between different web properties. Do we really need this? Do we really want to permanently tie identity across websites like this? I find this initial "need"/justification/requirement qu…
Yeah I think it is mostly businesses that think this is a huge problem to solve to have identities matched across everything seamlessly. Mostly what I care about is logins and payments which are addressed by password managers and form filling for credit cards. I just want a friction free experience for setting up an account, logging back into it, and maybe purchasing something. And ideally I'd like to self-host, mayb…
All of these decentralization arguments make me think of early git: >Every Git clone is a full-fledged repository with complete history and full revision tracking capabilities, not dependent on network access or a central server... http://web.archive.org/web/20080821113906/http://git-scm.com... Sure git can be used without the need to have have a central server, but everything became so much simpler with github and o…
I'm open to the idea that there are real problems that are best solved by PoW/PoS blockchains and smart contracts, so I was hoping this article would reveal one. It doesn't. As mentioned elsewhere, Persona was already a perfectly good technical solution to this, years ago. It failed for various reasons, none of which would be addressed by blockchains/smart contracts. Likewise, the problem of "conveniently and securel…
Have you actually used a web3 website? Once you have your wallet setup it's the most seamless login experience I've ever had. Also, I find it funny whenever someone says something like "web3 doesn't actually solve anything that hasn't been solved by other technologies like X". Then why isn't anyone using X? Why is nobody using Persona or Webauthn despite being "superior"?
I find it funny that you do not detect the irony in what you just said.
He isn't describing the true state of the world. Banks, brokerages, mortgage providers, and medical entities mostly don't use oauth2 and won't use this stuff either. The world is still old school. Grandpa dies and I go find the paper will. I get an affidavit from a lawyer and a death certificate with a seal from the state. I go into the bank with a bunch of papers and they figure out what to do. There isn't a chain o…
It's forever off because it's the wrong solution to a problem that no one is invested in even fully identifying let alone working at. My hot-take parallel argument is that full self driving is a smart road problem with 'dumber' cars and not a dumb road and smart cars problem. But there's no scope to VC of profit your way into smart road infrastructure so we do it the wrong way round and hope we can throw resources at…