4 ms·
You don't have to be an Elite Hacker to read a permissions list and be informed about what you're consenting to.
by iamsaitam 4y ago
You don't have to be an Elite Hacker to read a permissions list and be informed about what you're consenting to.
- vertis 4y agoEveryone over reaches on permissions though. It's practically industry standard to ask for a whole bunch of permission you don't need. Such that the likes of Google have multi-year efforts to crack down on it and reduce the ability to do it (in say Android). It's also a matter of UX. Github (or anyone with social login) should be clear about what your granting. "Do you trust this website? They will be able star repos on your behalf"
- dpkirchner 4y ago> "Do you trust this website? They will be able star repos on your behalf" ... "and if they do this too often, it's your account that will be punished" (in big bold red text and with a 15 second delay before the authorize button is enabled).
- nulld3v 4y agoThe UX for the authorization prompt is awful. The only difference between a regular sign in prompt and authorizing access to repositories is a single word: "Repositories". For example, these two prompts look very similar: https://community.atlassian.com/t5/image/serverpage/image-id/85718i24FE56D4ABAD2F37 https://community.atlassian.com/t5/image/serverpage/image-id... https://user-images.githubusercontent.com/2584493/51578239-b0ed7300-1e71-11e9-8a98-c2f76c5f7768.png https://user-images.githubusercontent.com/2584493/51578239-b... But they have entirely different levels of access!