7 ms·

This popup should be criminal. Ive misclicked the signin button multiple times, causing PII to be sent to a third party I dont trust without my authorization.

breadwinner 1y ago
You can create multiple profiles in Chrome. You shouldn't sign into Google in your main profile. That should be reserved for just one profile reserved for Gmail.
- hundchenkatze 1y ago
  Yes blame the victim
- autoexec 1y ago
  You can also just not use chrome. It's still a problem that shouldn't exist and the blame for that falls entirely on Google and the websites that push google's crap on users
  - breadwinner 1y ago
    Edge has its own shenanigans. Solution: When signing into Gmail use Edge. When signing int Outlook use Chrome. That way Google/Microsoft can't use your credentials to sign into the browser itself.
    - SlightlyLeftPad 1y ago
      Better: Use browsers not owned by search companies
  - signal11 1y ago
    Safari seems to have this too, now — especially with the latest iOS 18. Any workarounds would be massively appreciated.
    - slumberlust 1y ago
      This is the #1 reason I don't use apple OS. Even if you install another browser it's just a wrapper around safari restrictions...gross.
    - MiddleEndian 1y ago
      Firefox?
    - nuker 1y ago
      There is one! Mac only though. Scroll down to "#credential_picker_container" here: https://pxlnv.com/blog/user-stylesheets-are-still-pretty-great/ https://pxlnv.com/blog/user-stylesheets-are-still-pretty-gre...
ajross 1y ago
[flagged]
- jazzyjackson 1y ago
  > most of them are at least slightly criminal Huh ? Not wanting reddit to know my government name makes me a suspect ?
  - alt227 1y ago
    Having a 'government name' and calling it that makes you suspicious alone.
- deleted 1y ago
  [deleted]
- cosmotic 1y ago
  > Name and Email Yes, both are PII, which is highly regulated in EU and CA (among others I'm sure). If these knowingly "leaked" in a data breach, the company which leaked them would be legally obligated to notify me. Sounds pretty serious to me.
  - ajross 1y ago
    [flagged]
    - ceejayoz 1y ago
      > inarguably much more impactful a privacy issue Except, you know, the volume of users impacted. Tea had a few tens of thousands of users. Google has billions.
    - MiddleEndian 1y ago
      But it's a similar concept. If someone accidentally gives some website their name + email, they could be part of a leak for some service they don't even use. People probably care less about Tea in particular because they've never heard about it before the data leaks.
bigthymer 1y ago
I agree that it is problematic. You can mostly block it with the uBlock extension.
TheMiddleMan 1y ago
Don't worry about misclicks, Google already tracked your visit when the webpage was loaded. Google One Tap works via a script tag from Google servers: https://developers.google.com/identity/gsi/web/guides/display-google-one-tap https://developers.google.com/identity/gsi/web/guides/displa...
- deleted 1y ago
  [deleted]
- jibe 1y ago
  The bad thing is not sharing the info with Google (you are right, just by siing it, Google has your info), but the random third party website.
sneak 1y ago
Delete your Google account and this won’t happen.
- nuker 1y ago
  It happens a lot regardless of browser and accounts and incognito. It just pops up everywhere.
- legends2k 1y ago
  I haven't signed in to my Google account since browser install but I still see it in StackOveflow.
rs186 1y ago
Blocked this using uBlock since years ago.
montag 1y ago
I hope the PMs are reading this thread. They misjudged the tradeoffs
- soraminazuki 1y ago
  If teaching ethics to big tech worked, this would've ceased to be a problem more than a decade ago.
qrobit 1y ago
FWIW, these uBlock Origin rules solve the ploblem: ||accounts.google.com/gsi/iframe ##iframe[src^="http://accounts.google.com/gsi/iframe"] ##iframe[src^="https://accounts.google.com/gsi/iframe"] ##iframe[src^="//accounts.google.com/gsi/iframe"] ###credential_picker_container source: https://stackoverflow.com/a/78429389 https://stackoverflow.com/a/78429389. Last rule is from me since popup was invisible but still blocked the content underneath.
- avel 1y ago
  Good information, but you can already turn this off via the (quite hidden, I admit) setting that is mentioned in the article. That's a better way to turn this off completely, rather than patch it via a visual rule.
  - cormorant 1y ago
    The article mentions a setting in Chrome only. Someone using uBlock Origin is not using Chrome.
  - metadat 1y ago
    Either way it's something you'd need to go out of your way to configure any time you interact with a new web browser. And both ways can be disabled randomly (Chrome settings changes during browser updates, or uBlock extension being deprecated).
  - Quin-hacker 1y ago
    Brave browser does not have an option to turn it off but uBlock Origin custom filter works. In the Brave community the only solution offered was an adblock filter: brave://adblock (custom filter) ||accounts.google.com/gsi/client$script,third-party https://community.brave.com/t/annoying-login-with-google-popup/448340/6 https://community.brave.com/t/annoying-login-with-google-pop...
- smileybarry 1y ago
  The irony of getting that popup on Stack Overflow when I clicked that link

breadwinner 1y ago

You can create multiple profiles in Chrome. You shouldn't sign into Google in your main profile. That should be reserved for just one profile reserved for Gmail.

hundchenkatze 1y ago
Yes blame the victim
autoexec 1y ago
You can also just not use chrome. It's still a problem that shouldn't exist and the blame for that falls entirely on Google and the websites that push google's crap on users
- breadwinner 1y ago
  Edge has its own shenanigans. Solution: When signing into Gmail use Edge. When signing int Outlook use Chrome. That way Google/Microsoft can't use your credentials to sign into the browser itself.
  - SlightlyLeftPad 1y ago
    Better: Use browsers not owned by search companies
- signal11 1y ago
  Safari seems to have this too, now — especially with the latest iOS 18. Any workarounds would be massively appreciated.
  - slumberlust 1y ago
    This is the #1 reason I don't use apple OS. Even if you install another browser it's just a wrapper around safari restrictions...gross.
  - MiddleEndian 1y ago
    Firefox?
  - nuker 1y ago
    There is one! Mac only though. Scroll down to "#credential_picker_container" here: https://pxlnv.com/blog/user-stylesheets-are-still-pretty-great/ https://pxlnv.com/blog/user-stylesheets-are-still-pretty-gre...

ajross 1y ago

[flagged]

jazzyjackson 1y ago
> most of them are at least slightly criminal Huh ? Not wanting reddit to know my government name makes me a suspect ?
- alt227 1y ago
  Having a 'government name' and calling it that makes you suspicious alone.
deleted 1y ago
[deleted]
cosmotic 1y ago
> Name and Email Yes, both are PII, which is highly regulated in EU and CA (among others I'm sure). If these knowingly "leaked" in a data breach, the company which leaked them would be legally obligated to notify me. Sounds pretty serious to me.
- ajross 1y ago
  [flagged]
  - ceejayoz 1y ago
    > inarguably much more impactful a privacy issue Except, you know, the volume of users impacted. Tea had a few tens of thousands of users. Google has billions.
  - MiddleEndian 1y ago
    But it's a similar concept. If someone accidentally gives some website their name + email, they could be part of a leak for some service they don't even use. People probably care less about Tea in particular because they've never heard about it before the data leaks.

bigthymer 1y ago

I agree that it is problematic. You can mostly block it with the uBlock extension.

TheMiddleMan 1y ago

Don't worry about misclicks, Google already tracked your visit when the webpage was loaded. Google One Tap works via a script tag from Google servers: https://developers.google.com/identity/gsi/web/guides/display-google-one-tap https://developers.google.com/identity/gsi/web/guides/displa...

deleted 1y ago
[deleted]
jibe 1y ago
The bad thing is not sharing the info with Google (you are right, just by siing it, Google has your info), but the random third party website.

sneak 1y ago

Delete your Google account and this won’t happen.

nuker 1y ago
It happens a lot regardless of browser and accounts and incognito. It just pops up everywhere.
legends2k 1y ago
I haven't signed in to my Google account since browser install but I still see it in StackOveflow.

rs186 1y ago

Blocked this using uBlock since years ago.

montag 1y ago

I hope the PMs are reading this thread. They misjudged the tradeoffs

soraminazuki 1y ago
If teaching ethics to big tech worked, this would've ceased to be a problem more than a decade ago.

qrobit 1y ago

FWIW, these uBlock Origin rules solve the ploblem: ||accounts.google.com/gsi/iframe ##iframe[src^="http://accounts.google.com/gsi/iframe"] ##iframe[src^="https://accounts.google.com/gsi/iframe"] ##iframe[src^="//accounts.google.com/gsi/iframe"] ###credential_picker_container source: https://stackoverflow.com/a/78429389 https://stackoverflow.com/a/78429389. Last rule is from me since popup was invisible but still blocked the content underneath.

avel 1y ago
Good information, but you can already turn this off via the (quite hidden, I admit) setting that is mentioned in the article. That's a better way to turn this off completely, rather than patch it via a visual rule.
- cormorant 1y ago
  The article mentions a setting in Chrome only. Someone using uBlock Origin is not using Chrome.
- metadat 1y ago
  Either way it's something you'd need to go out of your way to configure any time you interact with a new web browser. And both ways can be disabled randomly (Chrome settings changes during browser updates, or uBlock extension being deprecated).
- Quin-hacker 1y ago
  Brave browser does not have an option to turn it off but uBlock Origin custom filter works. In the Brave community the only solution offered was an adblock filter: brave://adblock (custom filter) ||accounts.google.com/gsi/client$script,third-party https://community.brave.com/t/annoying-login-with-google-popup/448340/6 https://community.brave.com/t/annoying-login-with-google-pop...
smileybarry 1y ago
The irony of getting that popup on Stack Overflow when I clicked that link