Live data from Hacker News

Sign in with Google in Chrome

underpassapp.com

121–130 of 313 posts

Re: Sign in with Google in Chrome

#121
post #115

Earlier quoted context omitted.

their "private" is not private. about a month ago, i searched for some health-related stuff in a chrome incognito window and then immediately afterwards got related sponsored product ads on amazon in a logged in normal window.

One of my fav party tricks when I get on someone's Wi-Fi is to search for an obscure disease with an expensive treatment. Everyone in the geographical area seems to start getting ads for it for a while afterwards!

Please tell us you have a list to share.

Re: Sign in with Google in Chrome

#122
post #21

The Chrome experience is actually part of a new standard, Federated Credential Management (or FedCM for short). The idea is to create a browser mediated login experience that gives the identity provider and web app what they need without being able to correlate requests across the Internet. I am working on an article on this topic. If you are interested in learning more, here's a video from a recent auth focused conf…

I'm curious - how does the standard make "to continue, google.com will share your name, e-mail address and profile picture" compatible with "a modern, privacy-preserving standard for federated identity on the web" ?? I mean, that doesn't sound privacy-preserving at all?

Why would you share your real name with Google when making a gmail account, or use your real picture?

It's fine to be pseudonymous on the Internet if you are in control of your pseudonyms, which Google accounts actually does allow with some extra work (don't mix your chrome profiles and Google accounts, etc.)

Or, like me, you can roll the dice on real names on the Internet (for professional things mostly)

Re: Sign in with Google in Chrome

#123
post #46
post #12

Does nobody find this intrusive when it appears on sites like pornhub? Of all places where I'd sign in with a Google account... holy heck, I was very surprised they chose to let Google do that nearly-fullscreen popup on their site upon every visit (since you visit in private tab, it's a fresh session every time) Even on reddit it annoys the heck out of me and I was very surprised they let this third party ruin the ex…

It does disrupt the user experience and clobber a site's own home page, but associating a persistent identity to a user is VERY valuable to sites, and normal sign up flows have a lot of friction. They probably figured it's worth the cost if it gets more users to login/create accounts. Its presence despite the drawbacks indicates a lot of people use this feature.

> associating a persistent identity to a user is VERY valuable

My fear is that this is the real "AI" endgame. Flood the world with bots then become the defacto authority of "real" users.

Re: Sign in with Google in Chrome

#124
post #12

Does nobody find this intrusive when it appears on sites like pornhub? Of all places where I'd sign in with a Google account... holy heck, I was very surprised they chose to let Google do that nearly-fullscreen popup on their site upon every visit (since you visit in private tab, it's a fresh session every time) Even on reddit it annoys the heck out of me and I was very surprised they let this third party ruin the ex…

There's a big upside to Google One Tap. It makes users sign up for your product like crazy. I recently added it to a SaaS web app I'm working on, and the number of new sign ups went up 8x overnight. You don't necessarily have to create an account to use the minimal functionalty of our app, but after signing up you do get some perks, and we get a way to communicate with the user through email. So I think it can be ben…

You're assuming that the user actually wants to sign up. In reality, it's likely that they're just clicking "Continue" in order to get rid of the dialog and couldn't care less about a signup.

Re: Sign in with Google in Chrome

#125
post #21

The Chrome experience is actually part of a new standard, Federated Credential Management (or FedCM for short). The idea is to create a browser mediated login experience that gives the identity provider and web app what they need without being able to correlate requests across the Internet. I am working on an article on this topic. If you are interested in learning more, here's a video from a recent auth focused conf…

If it's a new standard, it must have… some kind of cross-industry support right? I ask because it looks like https://github.com/w3c-fedid/FedCM/graphs/contributors is mostly people who work at Google (I gave up once I hit people with ten or fewer commits)…

Re: Sign in with Google in Chrome

#126
post #12

Does nobody find this intrusive when it appears on sites like pornhub? Of all places where I'd sign in with a Google account... holy heck, I was very surprised they chose to let Google do that nearly-fullscreen popup on their site upon every visit (since you visit in private tab, it's a fresh session every time) Even on reddit it annoys the heck out of me and I was very surprised they let this third party ruin the ex…

They also recently must have changed the container, I noticed my adblock wasn't catching it anymore. What I find annoying though is its often slow to load and conveniently the sign in button is right where you'd click

Re: Sign in with Google in Chrome

#127

Earlier quoted context omitted.

Also true if I use my gmail address. I'll confess that for many websites I don't care that much. Depending on a password manager would be better, though. Semi-related anecdote: I lost my Reddit account to a cryptocurrency spammer due to a weak password and had to create another, so I lost my preferred username. Annoying but not a huge deal. (Reddit did freeze the old account but wouldn't give it back.)

No. You just cant password reset if you lose access to email. You can still log in.

This is not always the case. Reddit sometimes locks the account until you verify it or reset the password by email. Happened with my email pointed at a .tk domain and I had to call freenom a bunch to get the domain back.

Re: Sign in with Google in Chrome

#128
post #50

Earlier quoted context omitted.

Of course! That's why I even added this to my uBlock filter list on mobile: accounts.google.com/gsi/client

How do you get ublock to work in chrome after the update? I tried a fix I found here but it resets every time I restart the browser

Have you tried https://github.com/r58Playz/uBlock-mv3

Re: Sign in with Google in Chrome

#129
post #3

I actually needed that button the other day. I have an account on Etsy, but wasn't sure if it was sign in with google or an etsy account using my gmail. Signing in to the website's own "login with google" button was a redirect loop. Requesting password reset sent me no email. At some point Chrome offered to sign-in for me, and that worked.

I'm never confused about what I've used to sign in because I only use randomly generated passwords using my password manager (Bitwarden), and it offers to use them automatically when I go to a website. Another advantage is that Google cannot cut my access to all of my accounts on the internet.

If Bitwarden can come up with something similar, I'd gladly welcome it, even though it's awesome already.

Re: Sign in with Google in Chrome

#130

Earlier quoted context omitted.

their "private" is not private. about a month ago, i searched for some health-related stuff in a chrome incognito window and then immediately afterwards got related sponsored product ads on amazon in a logged in normal window.

This is not true of any web browser because of fingerprinting. That’s the point of fingerprinting for ad networks. You can try using a different device but even then, I occasionally get recommending things that are definitely influenced by my roommates (i.e. on the same WiFi) Using something that prevents fingerprinting helps, but only if you don’t use that browser all the time — otherwise it’s just another fingerpri…

> This is not true of any web browser because of fingerprinting.

Some browsers, like the one you should be using, have anti-fingerprinting tech in them.

Post reply on HN