3 ms·

You should probably put "Please login with your Facebook or Gmail account below" on your front page instead. Modify the services named based on expected client

by jarek 16y ago

You should probably put "Please login with your Facebook or Gmail account below" on your front page instead. Modify the services named based on expected clients. Choose one or more from the following: AOL, BBC, Facebook, Google, IBM, MySpace, Orange, PayPal, VeriSign, LiveJournal, Yandex, Ustream and Yahoo!. * On the sign-up page, put in smaller text "You can sign up/log in with any compatible OpenID service" for the technically savvy users, if you expect any at all. Don't straw man. * list copied from Wikipedia.

bugsy 16y ago
A problem with asking someone for their gmail password to sign into malwarenet.org is that it seems very suspicious. Why does malwarenet.org want my password? I bet I can guess - they want to steal my email, find my bank account numbers and identity fraud me. Oh, it doesn't work that way, right right, but how can any one without exceptional technical skills know that for sure? Lots of site spoofing out there. Hell, opendns is giving me a spoofed ip address for google right now. What is that about, I thought they were secure. What else on my DNS service has been hacked? Bank sites? Probably.
- jarek 16y ago
  1) Unless I am misunderstanding the standard, malwarenet.org never asks for your OpenID password -- your OpenID provider does. 2) Why does malwarenet.org want your Facebook password / to connect with your Facebook account?
zumda 16y ago
"Modify the services named based on expected clients. Choose one or more from the following: AOL, BBC, Facebook, Google, IBM, MySpace, Orange, PayPal, VeriSign, LiveJournal, Yandex, Ustream and Yahoo!. " That's the problem! Most people will look at this and don't know what to do. People hate choice, you generally have to lead them. On the other hand, that you even have to provide such a big list is a flaw in the OpenID spec in my opinion. Obviously doesn't apply to everyone, but most of the time they don't want to think, they want to use the app.
- jarek 16y ago
  Perhaps I didn't phrase my comment clearly? I meant that the website creator can pick one or two of the above to feature on the sign-up page. Examples: Aiming at techy 20-somethings? Google's your bet. Professionals? Advertise Linkedin. Users from Russia? Yandex and Livejournal. Advertise one or two of the most likely sign-in credentials (so people who hate choice have it easy), and then put a small note that others are accepted too (so people who know what's going on aren't locked out).

by jarek 16y ago

bugsy 16y ago

A problem with asking someone for their gmail password to sign into malwarenet.org is that it seems very suspicious. Why does malwarenet.org want my password? I bet I can guess - they want to steal my email, find my bank account numbers and identity fraud me. Oh, it doesn't work that way, right right, but how can any one without exceptional technical skills know that for sure? Lots of site spoofing out there. Hell, opendns is giving me a spoofed ip address for google right now. What is that about, I thought they were secure. What else on my DNS service has been hacked? Bank sites? Probably.

jarek 16y ago
1) Unless I am misunderstanding the standard, malwarenet.org never asks for your OpenID password -- your OpenID provider does. 2) Why does malwarenet.org want your Facebook password / to connect with your Facebook account?

zumda 16y ago

"Modify the services named based on expected clients. Choose one or more from the following: AOL, BBC, Facebook, Google, IBM, MySpace, Orange, PayPal, VeriSign, LiveJournal, Yandex, Ustream and Yahoo!. " That's the problem! Most people will look at this and don't know what to do. People hate choice, you generally have to lead them. On the other hand, that you even have to provide such a big list is a flaw in the OpenID spec in my opinion. Obviously doesn't apply to everyone, but most of the time they don't want to think, they want to use the app.

jarek 16y ago
Perhaps I didn't phrase my comment clearly? I meant that the website creator can pick one or two of the above to feature on the sign-up page. Examples: Aiming at techy 20-somethings? Google's your bet. Professionals? Advertise Linkedin. Users from Russia? Yandex and Livejournal. Advertise one or two of the most likely sign-in credentials (so people who hate choice have it easy), and then put a small note that others are accepted too (so people who know what's going on aren't locked out).