Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Don't use third party auth to sign in

gurjeet.singh.im

Post reply on HN
Print view View original

191–200 of 544 posts

Re: Don't use third party auth to sign in

#191

Post by sneakymichael »

ekianjo wrote: post #182
aboringusername wrote: post #125

I'm honestly not sure where we went so wrong as a society so as to reach this point. Whether it's overzealous AI or the AMPification of the web. Google act with impunity and without remorse, every action designed to further their goals and agendas without respect to humans caught in the crossfire. If Google can, without due process and fair warning, remove your existence then this is a power that should be delegated…

> Yet here it is. Google can offer their services and the legal system seemingly doesn't want to be involved. Why ? The real question is why do people use Google to sign in to other services? It never even crossed my mind no matter how long I have had a Google account.

Ease. If you're already logged into Google, it's essentially a one click process.

Re: Don't use third party auth to sign in

#193

Post by mcjiggerlog »

Fnoord wrote: post #70
lasagnaphil wrote: post #31

Earlier quoted context omitted.

Use a browser plugin like this to always use the old site: https://addons.mozilla.org/en-US/firefox/addon/old-reddit-re...

Doesn't work on Firefox Android. I never go to Reddit by typing URL; I go to Reddit because I follow a link to it.

Creator of the extension here. It actually does work on Android, it's just not in the (very short) list of allowed extensions yet.

There is a workaround to add custom addons, though: https://github.com/tom-james-watson/old-reddit-redirect/issu...

Re: Don't use third party auth to sign in

#194

Post by joshuaissac »

greggman3 wrote: post #93
grezql wrote: post #6

Has anyone else noticed random popups on 3rd party websites asking for google sign in? I even used firefox when it happened: https://imgur.com/a/JC52lBV (lequipe.fr) https://imgur.com/a/VSM3Uk9 (reddit.com) https://imgur.com/a/KpVCYBL (medium.com)

Yes and it pissed me off because on mobile it pops up like 0.5-2 seconds late so if you're unlucky you go to click on something and it popups up under your finger and you've suddenly signed up and shared your info with a company you had no intention of ever signing up with. I complained to Google. I have a GSuites domain and I don't want my users to be able to sign up via Google. No resolution. I suggest you all comp…

This filter did it for me:

||accounts.google.com/gsi/iframe/select$subdocument

It blocks just the popups and not the login page itself. But Google may change their methods at any time to circumvent it, so your way is more robust.

Re: Don't use third party auth to sign in

#195

Post by intricatedetail »

This is what happens when you combine greed with lack of regulation. Google should be split into separate independent companies. When company is above the law and too big to fail it means we failed to address it. Write to your local representative and ask them to raise this problem.

Re: Don't use third party auth to sign in

#197

Post by xuki »

spians wrote: post #116
grezql wrote: post #6

Has anyone else noticed random popups on 3rd party websites asking for google sign in? I even used firefox when it happened: https://imgur.com/a/JC52lBV (lequipe.fr) https://imgur.com/a/VSM3Uk9 (reddit.com) https://imgur.com/a/KpVCYBL (medium.com)

You can disable these annoying prompts by going to https://myaccount.google.com/permissions and disabling "Google Account sign-in prompts". Ideally it should have been user opt in but Google followed dark pattern here.

If you have multiple Google accounts logged in, you'll have to do it for each account. Why, Google, why???

Re: Don't use third party auth to sign in

#198

Post by satyrnein »

mrweasel wrote: post #124
throw_m239339 wrote: post #66

Remember OpenID? Yes, that's what it was for, OAuth wasn't never meant for signing in other websites who just want your mail or something... Of course, all these big tech corps quickly dropped OpenID, they don't want people to control their online credentials or identity...

Sadly everyone wanted to be an OpenID provider, very few wanted to be a consumer of OpenID. Neither Google, Facebook nor any of the other major Internet sites where ever going to allow you to authenticate using a 3rd party.

Actually, Facebook was in fact a relying party for a time. See https://www.wired.com/2009/05/facebook-opens-up-to-openid/ for example.

Adoption was negligible so they eventually killed it.

Re: Don't use third party auth to sign in

#200

Post by chinzsteel »

hermitmaster wrote: post #108
spodek wrote: post #76

> Never Use Google to Sign-In Never Use Google.

You beat me to the punch. I fully abandoned Google and Facebook over two years ago. No regrets.

Sincerely interested in knowing how you did this. Any guide is appreciated. Thank you :)
Post reply on HN