Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Sign in with Google in Chrome

underpassapp.com

Post reply on HN
Print view View original

261–270 of 313 posts

Re: Sign in with Google in Chrome

#261

Post by hombre_fatal »

What's crazy is that it trains users to trust a component that can be faked by the website.

You can mimic the component and then redirect the button anywhere, and the user is primed to comply with whatever they see.

Like a fake "Actually it seems like your Google account is compromised. Please verify that it's you by doing X."

This kind of shit-tier feature should at the very least appear inside the browser chrome, not inset in/over the website. I'm so tired of amateur slop from megacorps that should know better.

Re: Sign in with Google in Chrome

#262

Post by tojumpship »

samtheprogram wrote: post #148
kennywinker wrote: post #130

Earlier quoted context omitted.

> This is not true of any web browser because of fingerprinting. Some browsers, like the one you should be using, have anti-fingerprinting tech in them.

You didn’t finish my comment. Read the last sentence. Anti-fingerprinting tech just produces a different fingerprint. Google knows e.g. when things are scrambled but certain other things stay the same.

Untrue, you can modify it enough to avoid giving it more entropy. Possible approaches include: - Spoofing browsers down to the TCP stack - Plausibily random values - Every possible bit scrambled on each request

You can see a similar thought-process behind Tor bridges so it is tried-and-tested. Noted that it is a much more difficult feat to accomplish in a full blown browser rather than network layer.

Re: Sign in with Google in Chrome

#263

Post by no_wizard »

encom wrote: post #244
scarface_74 wrote: post #228

Earlier quoted context omitted.

That’s why I register to sites with Apple using Hide my Email and I can just disable forwarding for the one burner email that spam is coming from.

I've encountered more than a few places that block temp emails like 10minutemail etc. It's so infuriating.

They have yet to block the Apple email relay. Granted, I haven't used it or tested it on every site. That said, Apple has one advantage other filters don't have, which is people who own Apple devices tend to be desirable to very desirable customers, which means adding friction to this would drive away higher average spenders.

I also use the fastmail.com masked email address for things, and that has not yet been an issue either.

Re: Sign in with Google in Chrome

#264

Post by nikisweeting »

hombre_fatal wrote: post #261

What's crazy is that it trains users to trust a component that can be faked by the website. You can mimic the component and then redirect the button anywhere, and the user is primed to comply with whatever they see. Like a fake "Actually it seems like your Google account is compromised. Please verify that it's you by doing X." This kind of shit-tier feature should at the very least appear inside the browser chrome, n…

100% the implementation is setting a terrible precedent to trust non-browser-native-looking UI for whats supposed to be a browser-level feature.

Re: Sign in with Google in Chrome

#265

Post by scarface_74 »

no_wizard wrote: post #263
encom wrote: post #244

Earlier quoted context omitted.

I've encountered more than a few places that block temp emails like 10minutemail etc. It's so infuriating.

They have yet to block the Apple email relay. Granted, I haven't used it or tested it on every site. That said, Apple has one advantage other filters don't have, which is people who own Apple devices tend to be desirable to very desirable customers, which means adding friction to this would drive away higher average spenders. I also use the fastmail.com masked email address for things, and that has not yet been an is…

And if you have an app in the AppStore and you allow third party sign ups through Google, Facebook, etc. You must allow “sign in with Apple”.

There is absolutely no app or service that I would use thst forces me to sign in with Google and doesn’t give me a choice to Sign in with Apple and let me Hide My Email.

Re: Sign in with Google in Chrome

#266

Post by nikisweeting »

signal11 wrote: post #17

“Sign in with Google” is annoying, but at least you can turn it off with chrome://settings/content/federatedIdentityApi Does anyone know how to switch this off on Safari please, especially Mobile Safari. I’ve noticed these sign-in popups on iOS 18.

This option never worked for me, I also tried the options under myaccount.google.com with no luck, I kept getting the popups and ended up having to switch to Brave and Safari to get rid of them.

Re: Sign in with Google in Chrome

#268

Post by nikisweeting »

Vinnl wrote: post #218

> What you may not realize if you use Safari or Firefox is that the banners are never displayed in Google Chrome! Ah, so that's why so many websites are OK with it - they probably just don't realise that it's there. > If the courts and antitrust regulators are reading—they probably won’t read my blog, but one can dream—this is yet another example of Google advantaging its own browser Chrome over other web browsers. A…

> the banners are never displayed in Google Chrome!

this is demonstrably false, I can share dozens of screenshots of this popup appearing in Chrome despite all the options checked that are supposed to disable it.

Re: Sign in with Google in Chrome

#269

Post by imagetic »

encom wrote: post #244
scarface_74 wrote: post #228

Earlier quoted context omitted.

That’s why I register to sites with Apple using Hide my Email and I can just disable forwarding for the one burner email that spam is coming from.

I've encountered more than a few places that block temp emails like 10minutemail etc. It's so infuriating.

Same. Pretty sure Meta was the first to get mad at me for it.

Re: Sign in with Google in Chrome

#270

Post by immibis »

StrandedKitty wrote: post #45
lucb1e wrote: post #12

Does nobody find this intrusive when it appears on sites like pornhub? Of all places where I'd sign in with a Google account... holy heck, I was very surprised they chose to let Google do that nearly-fullscreen popup on their site upon every visit (since you visit in private tab, it's a fresh session every time) Even on reddit it annoys the heck out of me and I was very surprised they let this third party ruin the ex…

There's a big upside to Google One Tap. It makes users sign up for your product like crazy. I recently added it to a SaaS web app I'm working on, and the number of new sign ups went up 8x overnight. You don't necessarily have to create an account to use the minimal functionalty of our app, but after signing up you do get some perks, and we get a way to communicate with the user through email. So I think it can be ben…

You're both right. If an account on your service is completely meaningless, I'd rather press one button than type my email, choose a password and go through a stupid email confirmation workflow. Also, it's very annoying that you need an account at all.
Post reply on HN