Why Not to Use Quora
waxy.org
Why Not to Use Quora
1–10 of 209 posts
Re: Why Not to Use Quora
#2Quora logs you in automatically if you're logged in to google.
Also makes it extremely hard to log out.
Not to mention they have no respect for users.
Re: Why Not to Use Quora
#3I agree with the view... But how do you get non HN people to stop using Quora? Ultimately it's that much larger audience that determines if it lives or dies.
Re: Why Not to Use Quora
#4Quora logs you in automatically if you're logged in to google. Also makes it extremely hard to log out. Not to mention they have no respect for users.
I don't know how you think this is actually possible. It sounds to me like you just logged in using oauth…
Edit: Hey, downvoters, it's not possible to just use Google's login mechanism without prompting an initial OAuth flow at some point in time. If it is, instead of proving me wrong here, tell Google how and you can make some good money out of it.
As was said below, if you want, you can revoke tokens here: https://myaccount.google.com/permissions
Re: Why Not to Use Quora
#5Quora logs you in automatically if you're logged in to google. Also makes it extremely hard to log out. Not to mention they have no respect for users.
I don't know how you think this is actually possible. It sounds to me like you just logged in using oauth… Edit: Hey, downvoters, it's not possible to just use Google's login mechanism without prompting an initial OAuth flow at some point in time. If it is, instead of proving me wrong here, tell Google how and you can make some good money out of it. As was said below, if you want, you can revoke tokens here: https://…
I did, once. But after that one entirely new sessions, they automatically "click" the sign in to google button behind the scenes and log me in with the token.
Very creepy
Re: Why Not to Use Quora
#6All philosophical views aside, there are some really core issues that got me to stop using Quora and unfortunately the case to stop using it is made by the site itself:
* The content quality has deteriorated significantly since the site's inception. The content is far cheaper than before and far less interesting in very obvious ways.
* Moderation systems have not done a good job of growing the site as a community. The site has lost the character that drew many people to it in the first place.
* The machine learning models terribly over-fit to user signals, creating a frustrating experience.
These 3 core issues with the site are what got me to gradually stop using it as someone who was initially an early adopter.
Re: Why Not to Use Quora
#7Earlier quoted context omitted.
I don't know how you think this is actually possible. It sounds to me like you just logged in using oauth… Edit: Hey, downvoters, it's not possible to just use Google's login mechanism without prompting an initial OAuth flow at some point in time. If it is, instead of proving me wrong here, tell Google how and you can make some good money out of it. As was said below, if you want, you can revoke tokens here: https://…
I did, once. But after that one entirely new sessions, they automatically "click" the sign in to google button behind the scenes and log me in with the token. Very creepy
I don't like Quora, but... that's just how OAuth is meant to work.
Re: Why Not to Use Quora
#8Quora logs you in automatically if you're logged in to google. Also makes it extremely hard to log out. Not to mention they have no respect for users.
I don't know how you think this is actually possible. It sounds to me like you just logged in using oauth… Edit: Hey, downvoters, it's not possible to just use Google's login mechanism without prompting an initial OAuth flow at some point in time. If it is, instead of proving me wrong here, tell Google how and you can make some good money out of it. As was said below, if you want, you can revoke tokens here: https://…
When a service typically uses an external identity provider, they usually still have local accounts that are created and linked to that form of authentication. Of course the user will always need to authenticate using that same external identity provider ,but it can be forced by the application server by initiating oauth without provocation in the backend.
What this seems like is after the user initially logged in and consented with Google, Quora went ahead and decided that they would initiate the oauth flow whenever the user visits the page regardless of whether the user explicitly hits the login button or not.
Re: Why Not to Use Quora
#9Earlier quoted context omitted.
I don't know how you think this is actually possible. It sounds to me like you just logged in using oauth… Edit: Hey, downvoters, it's not possible to just use Google's login mechanism without prompting an initial OAuth flow at some point in time. If it is, instead of proving me wrong here, tell Google how and you can make some good money out of it. As was said below, if you want, you can revoke tokens here: https://…
I did, once. But after that one entirely new sessions, they automatically "click" the sign in to google button behind the scenes and log me in with the token. Very creepy
Revoke the auth with google and clear any cookies you have with Quora. Worse that will happen if they redirect you to google to login.
Re: Why Not to Use Quora
#10Earlier quoted context omitted.
I don't know how you think this is actually possible. It sounds to me like you just logged in using oauth… Edit: Hey, downvoters, it's not possible to just use Google's login mechanism without prompting an initial OAuth flow at some point in time. If it is, instead of proving me wrong here, tell Google how and you can make some good money out of it. As was said below, if you want, you can revoke tokens here: https://…
I did, once. But after that one entirely new sessions, they automatically "click" the sign in to google button behind the scenes and log me in with the token. Very creepy
The first time you logged in with Google, you were presented with a User Consent screen that said "this website wants access to this information, do you agree?" and you clicked yes.
To break the link, go into Google and see what sites, apps, etc you granted access to. That's a good thing to do regularly anyway with every social provider.
I wrote about the implications of poorly implemented and abusive social authentication practices last month: https://www.scmagazine.com/home/security-news/using-social-a...