3 ms·
This is a strong and succinct argument. I'm disturbed it never really occurred to me, probably because I am in part naive and take certain things for granted, l
by dmitryminkovsky 6y ago
This is a strong and succinct argument. I'm disturbed it never really occurred to me, probably because I am in part naive and take certain things for granted, like that I will never have a dispute with Google wherein they disable my account. But of course that is possible even at "no fault" on my part, and of course Google is judge/jury/executioner when it comes to their services. Yikes.
One thing I don't understand is: the author suggests a remedy is using your email address instead of third party sign in. But what if your email address is Gmail? For example, I just went to my Stack Overflow account and added my email address as a sign in method. But then of course I realized: my email address is Gmail. So what's the difference? How are we supposed to put this into practice without running our own email? Email is just another form of third party auth.
- satya71 6y agoThe difference is you can still sign in with email and password. OAuth would fail on a locked account.
- dmitryminkovsky 6y agoYeah that’s true. Still pretty bad, though, right? What if the service requires you to 2F confirm an existing auth to change auth settings (to add another login if you are locked out of your email)?