4 ms·

It's not acceptable to force the use of a twitter/github/google/reddit login.

lauritz 11y ago
Given that everyone gets a different 'input' string for every problem to prevent the simplest form of cheating and to enable such a thing as a leaderboard, I think this is a very reasonable measure, better than having yet another e-mail login for a service that is by definition seasonal. Also, when you connect it to GitHub, it does only ask for a very limited amount of data. What solution would you have proposed?
- such_a_casual 11y ago
  A reply I made to another user in this thread: "You're joking right? The site could just use cookies like every flash game ever made. The site could generate a registration for the user. The site could take manual registration from the user. This trend of linking accounts between sites is completely inappropriate from people who are well aware of the privacy and security issues the internet faces today."
  - maxerickson 11y ago
    What are the privacy implications of having your github account provide an oath token to some rando site that you input a few numbers and strings into? I guess they could collect wrong attempts and use them to try to shame people?
    - such_a_casual 11y ago
      There is no implication whatsoever. It's explicit. This website has no need for your irl identity (or even just your identity as a programmer).
      - maxerickson 11y ago
        Okay, what are the dire problems that arise from sharing an identity with some rando site that you also put some numbers into?
        aaronem 11y ago
        Utterly nonexistent, which is why I'm surprised to see people making such a big damn deal over it. The privacy implications of having an identifiable account on any of the services used for AoC login are enormous by comparison, but I guess there's always some folks who'll "strain out gnats, yet swallow camels".
  - justifier 11y ago
    i agree with your original post, but i'm assuming the login with other services bit was to reduce effort expelled in making the project having reddit on the list of options means the barrier to entry can be counted in keypresses you can make as many reddit accounts as you want, much like hn, where the only requirements are username and password make one and just treat it like an advent login
    - such_a_casual 11y ago
      That's a fair point. I'll take your advice and use a reddit account. Thank you.
  - lauritz 11y ago
    While I agree that having one account to rule them all is generally a pretty bad idea if you're talking about projects that deal with sensitive data, I still think it's not that big a deal here. A cookie would tie you to one device, and I really think it is preferable to have this site (which is not dealing with any sensitive information about me whatsoever) not handle an e-mail/password combination, but let GitHub etc handle security. From a UX standpoint, I think this is a good solution that doesn't add too much complexity. If the app dealt with more private data, I would be screaming for a manual login myself.
tln 11y ago
It's totally acceptable to a lot of people. In fact I wouldn't be surprised if adding email registration reduced the conversion rate. This adventofcode is a gem, you are really missing out if you let the registration system deter you.
- such_a_casual 11y ago
  Email registration is the same thing. There's no reason that anyone should be forced to connect an account from another site to this one. However, at least with email addresses, it's trivial to use a temporary one.
  - maxerickson 11y ago
    Force is the wrong word, the site has ~0 leverage over visitors.
  - kryptiskt 11y ago
    It's also trivial to get a throwaway reddit account.
tremendo 11y ago
OK, but of course no-one is forcing anyone to anything. You are completely free to not partake in the silly programming exercises, as there are plenty of alternatives out there for your enjoyment. You could even buy a book, in cash, disconnect your computer from the Internet and satisfy your programming desires in absolute privacy and anonymity. I, for one, have no problem with the site's requirements, and find it quite enjoyable. Happy Holidays.

Given that everyone gets a different 'input' string for every problem to prevent the simplest form of cheating and to enable such a thing as a leaderboard, I think this is a very reasonable measure, better than having yet another e-mail login for a service that is by definition seasonal. Also, when you connect it to GitHub, it does only ask for a very limited amount of data. What solution would you have proposed?

such_a_casual 11y ago
A reply I made to another user in this thread: "You're joking right? The site could just use cookies like every flash game ever made. The site could generate a registration for the user. The site could take manual registration from the user. This trend of linking accounts between sites is completely inappropriate from people who are well aware of the privacy and security issues the internet faces today."
- maxerickson 11y ago
  What are the privacy implications of having your github account provide an oath token to some rando site that you input a few numbers and strings into? I guess they could collect wrong attempts and use them to try to shame people?
  - such_a_casual 11y ago
    There is no implication whatsoever. It's explicit. This website has no need for your irl identity (or even just your identity as a programmer).
    - maxerickson 11y ago
      Okay, what are the dire problems that arise from sharing an identity with some rando site that you also put some numbers into?
      - aaronem 11y ago
        Utterly nonexistent, which is why I'm surprised to see people making such a big damn deal over it. The privacy implications of having an identifiable account on any of the services used for AoC login are enormous by comparison, but I guess there's always some folks who'll "strain out gnats, yet swallow camels".
- justifier 11y ago
  i agree with your original post, but i'm assuming the login with other services bit was to reduce effort expelled in making the project having reddit on the list of options means the barrier to entry can be counted in keypresses you can make as many reddit accounts as you want, much like hn, where the only requirements are username and password make one and just treat it like an advent login
  - such_a_casual 11y ago
    That's a fair point. I'll take your advice and use a reddit account. Thank you.
- lauritz 11y ago
  While I agree that having one account to rule them all is generally a pretty bad idea if you're talking about projects that deal with sensitive data, I still think it's not that big a deal here. A cookie would tie you to one device, and I really think it is preferable to have this site (which is not dealing with any sensitive information about me whatsoever) not handle an e-mail/password combination, but let GitHub etc handle security. From a UX standpoint, I think this is a good solution that doesn't add too much complexity. If the app dealt with more private data, I would be screaming for a manual login myself.

tln 11y ago

It's totally acceptable to a lot of people. In fact I wouldn't be surprised if adding email registration reduced the conversion rate. This adventofcode is a gem, you are really missing out if you let the registration system deter you.

such_a_casual 11y ago
Email registration is the same thing. There's no reason that anyone should be forced to connect an account from another site to this one. However, at least with email addresses, it's trivial to use a temporary one.
- maxerickson 11y ago
  Force is the wrong word, the site has ~0 leverage over visitors.
- kryptiskt 11y ago
  It's also trivial to get a throwaway reddit account.

tremendo 11y ago

OK, but of course no-one is forcing anyone to anything. You are completely free to not partake in the silly programming exercises, as there are plenty of alternatives out there for your enjoyment. You could even buy a book, in cash, disconnect your computer from the Internet and satisfy your programming desires in absolute privacy and anonymity. I, for one, have no problem with the site's requirements, and find it quite enjoyable. Happy Holidays.