Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Sign in with Google in Chrome

underpassapp.com

Post reply on HN
Print view View original

31–40 of 313 posts

Re: Sign in with Google in Chrome

#31

Post by michaelt »

mooreds wrote: post #21

The Chrome experience is actually part of a new standard, Federated Credential Management (or FedCM for short). The idea is to create a browser mediated login experience that gives the identity provider and web app what they need without being able to correlate requests across the Internet. I am working on an article on this topic. If you are interested in learning more, here's a video from a recent auth focused conf…

I'm curious - how does the standard make "to continue, google.com will share your name, e-mail address and profile picture" compatible with "a modern, privacy-preserving standard for federated identity on the web" ??

I mean, that doesn't sound privacy-preserving at all?

Re: Sign in with Google in Chrome

#32

Post by jazzyjackson »

mooreds wrote: post #21

The Chrome experience is actually part of a new standard, Federated Credential Management (or FedCM for short). The idea is to create a browser mediated login experience that gives the identity provider and web app what they need without being able to correlate requests across the Internet. I am working on an article on this topic. If you are interested in learning more, here's a video from a recent auth focused conf…

That sounds really interesting, but is there any hope chrome would allow use of an identity provider other than google?

Re: Sign in with Google in Chrome

#33

Post by gwbas1c »

mooreds wrote: post #21

The Chrome experience is actually part of a new standard, Federated Credential Management (or FedCM for short). The idea is to create a browser mediated login experience that gives the identity provider and web app what they need without being able to correlate requests across the Internet. I am working on an article on this topic. If you are interested in learning more, here's a video from a recent auth focused conf…

Can we block sharing email addresses by default? It seems every time I sign in with Google the site / app starts SPAMming me without my consent.

It's pretty much why I don't use it: The SPAM.

Re: Sign in with Google in Chrome

#34

Post by w4rh4wk5 »

lucb1e wrote: post #12

Does nobody find this intrusive when it appears on sites like pornhub? Of all places where I'd sign in with a Google account... holy heck, I was very surprised they chose to let Google do that nearly-fullscreen popup on their site upon every visit (since you visit in private tab, it's a fresh session every time) Even on reddit it annoys the heck out of me and I was very surprised they let this third party ruin the ex…

Of course! That's why I even added this to my uBlock filter list on mobile:

accounts.google.com/gsi/client

Re: Sign in with Google in Chrome

#35

Post by tracker1 »

yoavm wrote: post #3
hnuser123456 wrote: post #2

I actually needed that button the other day. I have an account on Etsy, but wasn't sure if it was sign in with google or an etsy account using my gmail. Signing in to the website's own "login with google" button was a redirect loop. Requesting password reset sent me no email. At some point Chrome offered to sign-in for me, and that worked.

I'm never confused about what I've used to sign in because I only use randomly generated passwords using my password manager (Bitwarden), and it offers to use them automatically when I go to a website. Another advantage is that Google cannot cut my access to all of my accounts on the internet.

Aside: annoying when a site, specifically a govt website URL changes... I get REALLY skeptical if I land on a page my password manager (also Bitwarden) doesn't recognize with my credentials.

My local city utilities switched to some kind of google based auth from their previous separate user/password account login. Had to create a new login/account tied to my billing account.

Re: Sign in with Google in Chrome

#36

Post by esseph »

codedokode wrote: post #14

That Google popups are so annoying, they often cover the content, I wonder does Google pay websites for this or they annoy users for free? Also I don't understand who registers Google Accounts these days because every time I try to do this, they show a QR code and require to scan it with a mobile device, and I don't have time now to set up a virtual machine and research what it does to a mobile device and how one can…

Well, Android is the largest phone ecosystem in the world. Most of those phones ask you to sign in with your Google account when it first starts.

Re: Sign in with Google in Chrome

#38

Post by cosmotic »

ajross wrote: post #11
cosmotic wrote: post #5

This popup should be criminal. Ive misclicked the signin button multiple times, causing PII to be sent to a third party I dont trust without my authorization.

[flagged]

> Name and Email

Yes, both are PII, which is highly regulated in EU and CA (among others I'm sure). If these knowingly "leaked" in a data breach, the company which leaked them would be legally obligated to notify me. Sounds pretty serious to me.

Re: Sign in with Google in Chrome

#39

Post by HelloUsername »

eddythompson80 wrote: post #16

||accounts.google.com/gsi/*$xhr,script,3p UBO rule to block that. Or enable the “annoyances” list. It hides annoying cookie bs too. Add noscript too.

> Add noscript too

The Noscript extension becomes redundant with the uBlock Origin extension

https://github.com/arkenfox/user.js/wiki/4.1-Extensions#-don...

Re: Sign in with Google in Chrome

#40

Post by eddythompson80 »

HelloUsername wrote: post #39
eddythompson80 wrote: post #16

||accounts.google.com/gsi/*$xhr,script,3p UBO rule to block that. Or enable the “annoyances” list. It hides annoying cookie bs too. Add noscript too.

> Add noscript too The Noscript extension becomes redundant with the uBlock Origin extension https://github.com/arkenfox/user.js/wiki/4.1-Extensions#-don...

Only if you set UBO to block scripts as well. Though I prefer noscript’s UI personally.

Edit: To elaborate, you need to turn on “hard mode”[0] for UBO to replace noscript. Then you need to manage it through UBO interface which I don’t like[1]

[0] https://github.com/gorhill/uBlock/wiki/Blocking-mode:-hard-m...

[1] https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-qu...

Post reply on HN