5 ms·
I understand the reasoning behind this, since it's hard to get right, but if we offload all of our logins to Facebook,Google and friends, they suddenly get WAY
by zie 9y ago
I understand the reasoning behind this, since it's hard to get right, but if we offload all of our logins to Facebook,Google and friends, they suddenly get WAY more information about us. You as site author are giving them access to all of your users, and you as a user of the site are giving them access to where you wander on the Internet.
Plus if a breach happens on Facebook or Google, then the hackers get EVERYTHING including access to your site (as a site author).
So there are definitely downsides to doing social login(s) as well, and it's not as clear cut as just "let Google and friends do it for me".
- BrandoElFollito 9y agoWhat WAY more information do they get? They know that I use the site and (to some extend) when. I am under the (possibly false) poison that the risk is to let the requesting site (HN here) request to much data from, say, Google (my age, shoe size and whatever they store about me)
- zie 9y agoThey get that you use site X (and y,z, and q too) , when you use those sites, and where you were when you logged in from(i.e. your IP, browser info, etc). For one site, not a huge issue maybe, unless it's ilovemesome<insert something disgusting here>.com But add this up across many, many sites, and they suddenly get loads and loads more information to sell ads to you with.
- BrandoElFollito 9y agoYes, this is true - but at least in the case of Google this is peripheral compared to what they have though my browsing (search, email, etc.).