Live data from Hacker News

Sign in with Google in Chrome

underpassapp.com

231–240 of 313 posts

Re: Sign in with Google in Chrome

#231
post #50

Earlier quoted context omitted.

How do you get ublock to work in chrome after the update? I tried a fix I found here but it resets every time I restart the browser

> How do you get ublock to work in chrome after the update? Why does anyone keep using Chrome if they care the slightest about privacy? You're using a browser owned by a company that sells online ads. What do you expect?

The last thing I remember about Firefox was that it was a memory hog. Maybe this has changed in recent years

Re: Sign in with Google in Chrome

#232
post #11
post #5

This popup should be criminal. Ive misclicked the signin button multiple times, causing PII to be sent to a third party I dont trust without my authorization.

[flagged]

Just throw in only a date of birth and you have only all you need for identity theft.

Besides, email is usually enough to cross reverence with other benign data troves. But there is no way any reseller could possibly profit from that.

Really no reason to be overly paranoid about.

Re: Sign in with Google in Chrome

#233
post #63

Earlier quoted context omitted.

…until the user loses access to their Google account with no recourse and you have no secondary way to authenticate them.

Also true if I use my gmail address. I'll confess that for many websites I don't care that much. Depending on a password manager would be better, though. Semi-related anecdote: I lost my Reddit account to a cryptocurrency spammer due to a weak password and had to create another, so I lost my preferred username. Annoying but not a huge deal. (Reddit did freeze the old account but wouldn't give it back.)

That’s why you shouldn’t be using a Gmail address, and instead have your own domain for email.

Re: Sign in with Google in Chrome

#234

You can turn this off 1. https://myaccount.google.com/connections/settings for mobile 2. same link, sidebar help, for Chrome on Desktop settings.

That does not completely turn off the federated sign-in popup you see on the top right in various websites. The solution is actually already mentioned in the article.

Re: Sign in with Google in Chrome

#235
post #12

Does nobody find this intrusive when it appears on sites like pornhub? Of all places where I'd sign in with a Google account... holy heck, I was very surprised they chose to let Google do that nearly-fullscreen popup on their site upon every visit (since you visit in private tab, it's a fresh session every time) Even on reddit it annoys the heck out of me and I was very surprised they let this third party ruin the ex…

Of course! That's why I even added this to my uBlock filter list on mobile: accounts.google.com/gsi/client

I've never added a custom filter. Do they sync to all my Firefox browsers that have uBO installed?

Re: Sign in with Google in Chrome

#236
post #214
post #5

This popup should be criminal. Ive misclicked the signin button multiple times, causing PII to be sent to a third party I dont trust without my authorization.

FWIW, these uBlock Origin rules solve the ploblem: ||accounts.google.com/gsi/iframe ##iframe[src^="http://accounts.google.com/gsi/iframe"] ##iframe[src^="https://accounts.google.com/gsi/iframe"] ##iframe[src^="//accounts.google.com/gsi/iframe"] ###credential_picker_container source: https://stackoverflow.com/a/78429389 . Last rule is from me since popup was invisible but still blocked the content underneath.

Good information, but you can already turn this off via the (quite hidden, I admit) setting that is mentioned in the article. That's a better way to turn this off completely, rather than patch it via a visual rule.

Re: Sign in with Google in Chrome

#237
post #125
post #21

The Chrome experience is actually part of a new standard, Federated Credential Management (or FedCM for short). The idea is to create a browser mediated login experience that gives the identity provider and web app what they need without being able to correlate requests across the Internet. I am working on an article on this topic. If you are interested in learning more, here's a video from a recent auth focused conf…

If it's a new standard, it must have… some kind of cross-industry support right? I ask because it looks like https://github.com/w3c-fedid/FedCM/graphs/contributors is mostly people who work at Google (I gave up once I hit people with ten or fewer commits)…

As usual, the feature is being railroaded by google and other implementers are given the choice between following Chrome's de-facto choices or not implementing it, and breaking websites that will use it anyway.

Re: Sign in with Google in Chrome

#238

Earlier quoted context omitted.

> This is not true of any web browser because of fingerprinting. Some browsers, like the one you should be using, have anti-fingerprinting tech in them.

Anti fingerprinting is nice but if you get served ads based on your IP address you're going to need more than just a browser to escape tracking based advertising. Adblockers aren't good enough when websites you visit use first-party servers to forward data back to ad networks.

Serving ads based on IP seems foolish when very, very few people have a static IP. I'm sure that a healthy minority of folks on HN do, but we're hardly representative of the general population.

Re: Sign in with Google in Chrome

#239
post #236
post #214

Earlier quoted context omitted.

FWIW, these uBlock Origin rules solve the ploblem: ||accounts.google.com/gsi/iframe ##iframe[src^="http://accounts.google.com/gsi/iframe"] ##iframe[src^="https://accounts.google.com/gsi/iframe"] ##iframe[src^="//accounts.google.com/gsi/iframe"] ###credential_picker_container source: https://stackoverflow.com/a/78429389 . Last rule is from me since popup was invisible but still blocked the content underneath.

Good information, but you can already turn this off via the (quite hidden, I admit) setting that is mentioned in the article. That's a better way to turn this off completely, rather than patch it via a visual rule.

The article mentions a setting in Chrome only. Someone using uBlock Origin is not using Chrome.

Re: Sign in with Google in Chrome

#240
post #12

Does nobody find this intrusive when it appears on sites like pornhub? Of all places where I'd sign in with a Google account... holy heck, I was very surprised they chose to let Google do that nearly-fullscreen popup on their site upon every visit (since you visit in private tab, it's a fresh session every time) Even on reddit it annoys the heck out of me and I was very surprised they let this third party ruin the ex…

Sometimes reddit will automatically log-in for you :(
Post reply on HN