3 ms·
Absolutely not, it ties all of your information together trivially. People should just use password managers with a unique password for each website. Then you d
by cyphar 9y ago
Absolutely not, it ties all of your information together trivially. People should just use password managers with a unique password for each website. Then you don't really about one site's bad security meaning that your security on another site is ruined (with SSO that's also an issue, you just trust the SSO provider more explicitly). You only care about whether data was accessed or modified with a particular service.
- Kiro 9y agoNo, I prefer Google or Facebook.
- cyphar 9y agoAnd if your Google or Facebook account is hacked...?
- user5994461 9y agoSame as if your password manager account is hacked.
- rocqua 9y agoThere are non-cloud based password managers.
- ec109685 9y agoIf gmail is your password recovery address, hacking your gmail, will give the hacker access anyway.
- thinkingemote 9y agoMost people (e.g not hackernews readers) only care about how easy it is. Assuming that most people would prefer to simply use existing authentication services is accurate (even if it makes some of us cringe).
- thinkingemote 9y agoMost people (e.g not hackernews readers) only care about how easy it is. Assuming that most people would prefer to simply use existing authentication services is accurate and not remotely absolute (even if it makes some of us cringe).
- ec109685 9y agoIf gmail is your password recovery address, hacking your gmail, will give the hacker access anyway.