3 ms·
I am not so sure if oauth is to blame alone. I mean, it is a technology that lets you control what you want to share. However, engaging in business with a partn
by arendtio 6y ago
I am not so sure if oauth is to blame alone. I mean, it is a technology that lets you control what you want to share. However, engaging in business with a partner who decides to change the rules, is something I see a lot more critical.
So maybe the lesson should sound more like
- 'Don't use Dropbox for anything you care about' or
- 'Don't do business with large corporations for anything you care about'
To clarify, I am not saying it to protect oauth (in its current state I am not a particular fan of it), but to show, that the technology doesn't change by itself and that someone decided to change it. So the company who decided to execute this unethical change should take its share of the blame too.
- koheripbal 6y agoIsnt the point here that you don't have control? Seems like you need to allow contact access to use google login at all. There is no fine grained control to permissions.
- robertlagrant 6y agoThat's not oauth, that's just the granularity the auth provider has decided to expose in its permissions system, and the granularity Dropbox have opted to request.
- jeromegv 6y agoThat's oauth in the sense that if you login with your own login/pass, this will never be something they can force on you. I never use oauth, always login/pass, and don't have to care about what permissions they ask me, it's easy, they have absolutely zero access to my gmail/facebook/twitter whatever.