6 ms·
It's kind of bullshit too though that you are required to add an apple login.
by colordrops 5y ago
It's kind of bullshit too though that you are required to add an apple login.
- threatofrain 5y agoAs a user I love it. More privacy for me.
- elefanten 5y agoAgree. It's made me sign up for many services that I never would have otherwise.
- ljm 5y agoLol, privacy? You think that's what it is? Apple forces you to use in-app purchases, Apple forces you to stick with their crippled browser ecosystem, it has no compatibility outside of Apple. Their protocols for messaging and device interop are closed-source; they have tech that tracks all your devices + these new beacons, and all your devices are those beacons too. You are more heavily tracked under Apple than you are in any other system. Did you think your iphone would be a location tracker for another device?
- ceejayoz 5y agoYou're mixing up "privacy from Apple" and "privacy from random third-party developers when using 'Login with Apple' specifically".
- fay59 5y agoYou could have saved yourself a fair amount of embarrassment with just a little bit of reading. Apple can’t decrypt beacon locations. https://support.apple.com/en-ca/guide/security/sece994d0126/1/web/1 https://support.apple.com/en-ca/guide/security/sece994d0126/...
- sneak 5y agoNo. You can't get an Apple ID without providing a phone number, street address, and email address.
- Retric 5y agoThat must be recent, I didn’t provide a street address.
- sneak 5y agoThe street address is not verified/authenticated, but the email and phone are.
- Retric 5y agoSure, but you can have an anonymous email address and phone number in the US.
- kiwijamo 5y agoI recall having to provide this around 2013 or so around the time I got an iPhone 5. But possibly it was part of their credit card verification? That could explain why some have been asked and not others.
- regecks 5y agoAs with others, I trust Apple to safeguard this information waaaay more than constantly rolling the dice with shady app publishers every time I sign up to something. That I can sign up to TikTok with "Sign in with Apple", with an auto-generated Apple Privacy email address and literally no other information, is quite amazing and useful.
- sneak 5y agoApple surrenders customer data on over 30,000 customers per year to the US government without search warrants or probable cause. This is disclosed in their own transparency report (FISA). This isn't optional; Apple has to provide data on any user account the USG demands of them, without a search warrant. Your trust in them is misplaced.
- omginternets 5y ago
- dmitryminkovsky 5y agoAs a developer it was a pretty exotic experience. Their OAuth service is unlike any other big name provider I'd used. Some day soon I hope to open source my Apple backend integrations in TypeScript, because Apple provides no backend SDKs, at least not for Node/JS/TS. Lots of people seem to use Sign In With Apple, though. They make it really nice for the user. The email relay thing is pretty neat. The thing that troubles me with OAuth is that if you don't provide apps with some other way to sign in and you lose access to you OAuth account, you lose access to all your applications.
- jbluepolarbear 5y agoIt was pretty painless to implement in my case, though I was already familiar with communicating with Apple backend services.
- deleted 5y ago[deleted]
- deleted 5y ago[deleted]
- deleted 5y ago[deleted]
- ksec 5y agoIt is even worst when your App isn't actually the content owner but a shell or client to existing services. Which means you cant add Apple Login, and that also means the end of your App.
- mixmastamyk 5y agoI don’t fully understand. Have a link to describe the issue?
- DuskStar 5y agoImagine a 3rd party HN app - they can't control the login options, and thus can't add apple login.
- sneak 5y agoLogin with only the site is ok; if you have Google or FB login then Cupertino requires Apple login too.
- terinjokes 5y agoThere are a few APIs I use where the OAuth dance would show users site and Google login options, but not Apple.
- bin_bash 5y agoIt’s only required to use Sign In with Apple if you use other third party logins—which wouldn’t be possible with your scenario anyways since you couldn’t do an oauth dance if you don’t own the private key.
- BobbyJo 5y agoWhite-label apps never use Google or Facebook authentication and not Apple?
- 101008 5y agoI have a Patreon page and a recipe in Zappier that sends new Patreons to Mailchimp. It seems Patreon allows to Login with Apple, because a few of my Patreons used it but never received any newsletter (it's one of the perks). I checked and it was because the email address that Patreon received and tried to send to Mailchimp failed. I lost a few Patreons because of this, because they thought I never sent the newsletter to them.
- gruez 5y ago>I checked and it was because the email address that Patreon received and tried to send to Mailchimp failed. I lost a few Patreons because of this, because they thought I never sent the newsletter to them. AFAIK apple's private relay only accepts mail signed by the corresponding developer. In other words, no third party can use the private relay address. edit: https://developer.apple.com/forums/thread/120112 https://developer.apple.com/forums/thread/120112
- 101008 5y agoHonestly I don't know, I never developed anything with Apple. But as a content seller that was my experience :(
- bin_bash 5y agoSeems like that could be a problem for some business models. Is an app allowed to prompt for a real email address if it uses Sign in with Apple?
- rootusrootus 5y ago> Is an app allowed to prompt for a real email address if it uses Sign in with Apple? It can ask, but cannot require it.
- dmitryminkovsky 5y agoIt's not just bullshit—it's diabolical. On your iOS device, you are logged in with one Apple ID at a time. This Apple identity is the one that makes In-App Purchases ("IAPs"). So if a user makes a purchase in your app signed in as "bob", and then logs out of your app and signs in as "alice", they still have that IAP. Therefore, the simplest, most correct way to have an app with IAPs and third party auth is to exclusively use Sign In With Apple, because Sign In With Apple is tied to your device's currently signed in Apple ID and all of its IAPs. https://stackoverflow.com/questions/63272699/how-do-you-handle-auto-renewable-subscriptions-in-apps-that-have-a-non-apple-acc https://stackoverflow.com/questions/63272699/how-do-you-hand... I considered removing my other third party auth methods but have kept them in to see how it goes... :|
- jbluepolarbear 5y agoApple account is not the same as login with Apple. IAPs have always been tied to the Apple account. It’s a pain in the ass to handle all the cases. It’s not any easier on Android either.
- dmitryminkovsky 5y agoRight, but Sign In with Apple is tied to your Apple account. I have no way to make an IAP autorenewable subscription and tie it to “bob” in my system. It’s tied to the iOS Apple account.
- jbluepolarbear 5y agoYou can’t tie it to bob. You have to look at the receipt and reward from that. So bob logs in you look at the receipt and bobs your uncle you have the subscriptions.
- dmitryminkovsky 5y agoAnd then what if, on your service, `bob` signs out and `alice` signs in? Then `alice` not only has `bob`'s subscriptions, but she also can't buy her own.
- Spivak 5y agoOnly if you allow login with other 3rd party login services. Honestly this seems pretty reasonable so apps are guaranteed usable even if you don’t have a Facebook or Google account. There are apps that only have social logins what with the “outsource your auth” marketing a few years back.
- Razengan 5y agoAs a user, no it’s not bullshit or diabolical, it’s a godsend. I’m glad they enforce it, saving me from handing out my email and a ton of other info to every random app I want to try for a while. Only predatory devs would complain against this rule, and I won’t miss them.