Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Don't use third party auth to sign in

gurjeet.singh.im

Post reply on HN
Print view View original

91–100 of 544 posts

Re: Don't use third party auth to sign in

#91

Post by reidrac »

grezql wrote: post #6

Has anyone else noticed random popups on 3rd party websites asking for google sign in? I even used firefox when it happened: https://imgur.com/a/JC52lBV (lequipe.fr) https://imgur.com/a/VSM3Uk9 (reddit.com) https://imgur.com/a/KpVCYBL (medium.com)

I use Firefox containers at work but I was postponing doing the same at home because it takes a bit of work to create the containers, assign sites, troubleshoot some minimal issues, etc; and THIS made me finally do it.

I knew that I was being tracked, but that was a bit too "in my face" to ignore it.

Re: Don't use third party auth to sign in

#92

Post by dawnerd »

grezql wrote: post #6

Has anyone else noticed random popups on 3rd party websites asking for google sign in? I even used firefox when it happened: https://imgur.com/a/JC52lBV (lequipe.fr) https://imgur.com/a/VSM3Uk9 (reddit.com) https://imgur.com/a/KpVCYBL (medium.com)

It’s called onetap if anyone is interested.

Re: Don't use third party auth to sign in

#93

Post by greggman3 »

grezql wrote: post #6

Has anyone else noticed random popups on 3rd party websites asking for google sign in? I even used firefox when it happened: https://imgur.com/a/JC52lBV (lequipe.fr) https://imgur.com/a/VSM3Uk9 (reddit.com) https://imgur.com/a/KpVCYBL (medium.com)

Yes and it pissed me off because on mobile it pops up like 0.5-2 seconds late so if you're unlucky you go to click on something and it popups up under your finger and you've suddenly signed up and shared your info with a company you had no intention of ever signing up with.

I complained to Google. I have a GSuites domain and I don't want my users to be able to sign up via Google. No resolution. I suggest you all complain too

I semi worked around it by adding accounts.google.com to my ublock origin block list but about once a month I have to turn it off to allow me to log into Google.

Note: I'm not against google. I am against this auto-popup. The logical conclusion is you'll go to a page and get 6 of those popups or more. One to sign up with Google, one to sign up with Apple. One to sign up with Facebook. One to sign up with Linkedin, etc...

The design of that system by google is not a good design based on the idea that if everyone did it it would be bad. Google should top it. If I click "sign up" on the sight then let the site offer me "login with X" and don't contect X until I click "login with X"

Re: Don't use third party auth to sign in

#94

Post by Multicomp »

I was forced to use sign in with google for dnd beyond as they don't support byo-email address (!), only google, twitch, apple, and yahoo.

We need a name and shame site for websites that can't be bothered to write a back end database for the 3 columns needed to store emails, salts, and hashes.

Re: Don't use third party auth to sign in

#95

Post by Shivetya »

well I am one who uses certain email addresses and even google sign-in on sites which I don't care about. it makes it easy to isolate spam and more.

i maintain a twenty five year old mindspring account just for sites I have no financial connection to.

Re: Don't use third party auth to sign in

#96

Post by snomad »

lasagnaphil wrote: post #31
MattGaiser wrote: post #22

Earlier quoted context omitted.

old.reddit.com.

Use a browser plugin like this to always use the old site: https://addons.mozilla.org/en-US/firefox/addon/old-reddit-re...

Uniqueness of browser plugins creates unique signature specific to user.

Re: Don't use third party auth to sign in

#97

Post by sundarurfriend »

andrepd wrote: post #65
forgotpwd16 wrote: post #62

Earlier quoted context omitted.

For those that don't want to pay, Yandex allows you to set up a number of emails using your own domain for free.

The only thing worse I can think than having Google read your email is having Yandex read it.

Depends on where you are. If you're in the US, sure, there is at least the theoretical possibility of legal protection against misuse. If you're elsewhere, they're not very different, and Yandex at least doesn't already have a million other data points about you to connect with this and build a bigger picture about your life.

Re: Don't use third party auth to sign in

#98

Post by snorremd »

signal11 wrote: post #71
DaiPlusPlus wrote: post #7

Earlier quoted context omitted.

Yeah but they’ve still got your emails.

There are alternatives to GSuite -- for instance, Fastmail. Or even the old PObox.com service which has been around since the 90s and is really cheap (Fastmail have bought it now, I notice).

Fastmail is very good. The web client is pretty simple, but feels so darned responsive (as in fast) compared to what I was used to from GMail. And spam is so far a non-issue.

Re: Don't use third party auth to sign in

#99

Post by eloisant »

angry_octet wrote: post #61

Good point, but if Google suspends my account I've got bigger things to worry about than the dozens of sites I've used once or twice a year. Paying for your own domain also comes with its own troubles. If you're not using Google (or some other service) as your mail forwarder, good luck being able to email anyone. Stealing you custom domain is also a real possibility, and negates your investment in Gmail 2FA.

You don't have to run your own server, you can use a services that will (1) have a better privacy policy than Google and (2) supports custom domains as a built-in feature. Like Protonmail for example.

Re: Don't use third party auth to sign in

#100

Post by diarrhea »

MattGaiser wrote: post #22
damnencryption wrote: post #14

Earlier quoted context omitted.

Yeah. Reddit is especially really intrusive and annoying. I feel like they just don't want people to use their site anymore. Whenever I open new Reddit, my memory and CPU usage goes up so badly.

old.reddit.com.

This together with RES and Shine makes it really pleasant actually. In fact, I think you don't need to visit old.reddit.com for RES/Shine to work. CPU/MEM usage is off the charts though (has gotten much better).
Post reply on HN