Spotify and Facebook: Is that phishing?
1–10 of 96 posts
Re: Spotify and Facebook: Is that phishing?
#2Amazing.
Also, this is yet another privacy threat that I dodged because I use the PwdHash extension (https://www.pwdhash.com/). You type the same password for all sites, but the extension invisibly uniquifies them on a per-site basis.
Re: Spotify and Facebook: Is that phishing?
#3It says "Facebook Email or Spotify Username" in the login box before typing in a username/email.
As far as I know, spotify uses username for login, and not email. By using your email, it's assuming you want to use facebook.
Re: Spotify and Facebook: Is that phishing?
#4Facebook and Spotify share a number of investors: billionaire Li Ka Shing has a stake in Facebook and Spotify. Yuri Milner’s DST Global, which owns roughly 10% of Facebook, is also in negotiations to buy a stake in Spotify. Facebook’s founding president and Napster founder Sean Parker, sits on the board of Spotify.
http://benjamin.sonntag.fr/Moglen-at-Re-Publica-Freedom-of-t...
Re: Spotify and Facebook: Is that phishing?
#5Amazing. Also, this is yet another privacy threat that I dodged because I use the PwdHash extension ( https://www.pwdhash.com/ ). You type the same password for all sites, but the extension invisibly uniquifies them on a per-site basis.
Shameless plug -- Pass: The Standard Unix Password Manager
http://zx2c4.com/projects/password-store/
It works damn well.
Re: Spotify and Facebook: Is that phishing?
#6I'm ashamed that this doesn't surprise me much. This looks like a huge oversight on Facebook's part, but with the countless reports on Facebook failing with privacy here, there and everywhere, it's like I don't care anymore.
The thing that numbs me even more is that client work, no matter how good of an argument one gives, will always have some form of third-party social login because it's oh-so-important and users will _always_ use it.
Re: Spotify and Facebook: Is that phishing?
#7It says "Facebook Email or Spotify Username" in the login box before typing in a username/email. As far as I know, spotify uses username for login, and not email. By using your email, it's assuming you want to use facebook.
And yet that in no way gives them the right to use that to log into your facebook (rather than using the API to authenticate) and install the spotify facebook app (giving themselves whatever permissions they like without asking the user).
Of course, the lesson here (besides that spotify cannot be trusted) is that you should never use a password for more than one account. Sure makes me glad I switched to using a password manager that uses randomly generated different passwords for each service I sign up to.
Re: Spotify and Facebook: Is that phishing?
#8If this type of behavior continues to be tolerated by users, the entire industry will suffer the backlash at some point. A few companies using obfuscated or unclear defaults will make it more likely that the government will bring down heavy legislation on all companies.
Re: Spotify and Facebook: Is that phishing?
#9Amazing. Also, this is yet another privacy threat that I dodged because I use the PwdHash extension ( https://www.pwdhash.com/ ). You type the same password for all sites, but the extension invisibly uniquifies them on a per-site basis.
To be honest, that looks like it has a some drawbacks when used with different domains that use the same authentication backend.
Think Google's different domains (google.com, google.co.uk, google.nl, gmail.com etc.) The demo gives a different hashed password whenever the TLD differs. And seeing that Google by default redirects you to the homepage of whatever country you're in at the moment, you might end up getting burned by the extension when travelling.
Re: Spotify and Facebook: Is that phishing?
#10Facebook and Spotify share a number of investors: billionaire Li Ka Shing has a stake in Facebook and Spotify. Yuri Milner’s DST Global, which owns roughly 10% of Facebook, is also in negotiations to buy a stake in Spotify. Facebook’s founding president and Napster founder Sean Parker, sits on the board of Spotify. http://benjamin.sonntag.fr/Moglen-at-Re-Publica-Freedom-of-t...
I don't understand this comment. Many companies share investors, especially at the level of Facebook and Spotify.
Are you trying to suggest that a mutual investor somehow has enough product control to strong-arm Facebook and Spotify into this?