4 ms·
Wish all sites let you login with one of the big identity providers like google or Facebook.
by ec109685 9y ago
Wish all sites let you login with one of the big identity providers like google or Facebook.
- ocdtrekkie 9y ago"Wish all sites reported your activity to advertisers like Facebook or Google." Convenience is a big selling point, but the price is too high.
- cyphar 9y agoAbsolutely not, it ties all of your information together trivially. People should just use password managers with a unique password for each website. Then you don't really about one site's bad security meaning that your security on another site is ruined (with SSO that's also an issue, you just trust the SSO provider more explicitly). You only care about whether data was accessed or modified with a particular service.
- Kiro 9y agoNo, I prefer Google or Facebook.
- cyphar 9y agoAnd if your Google or Facebook account is hacked...?
- user5994461 9y agoSame as if your password manager account is hacked.
- rocqua 9y agoThere are non-cloud based password managers.
- ec109685 9y agoIf gmail is your password recovery address, hacking your gmail, will give the hacker access anyway.
- thinkingemote 9y agoMost people (e.g not hackernews readers) only care about how easy it is. Assuming that most people would prefer to simply use existing authentication services is accurate (even if it makes some of us cringe).
- thinkingemote 9y agoMost people (e.g not hackernews readers) only care about how easy it is. Assuming that most people would prefer to simply use existing authentication services is accurate and not remotely absolute (even if it makes some of us cringe).
- ec109685 9y agoIf gmail is your password recovery address, hacking your gmail, will give the hacker access anyway.
- w8rbt 9y agoSingle sign on is single compromise.
- ec109685 9y agoIf your single sign on provider is also the email address for password recovery, single sign on doesn't compromise you further.