Re:Don't use third party auth to sign in
by IanCal on Saturday November 14, 2020 @09:16AM
(#25092415)
I don't want more accounts and passwords. The security seems strictly worse than just authenticating against my email provider directly.
Re:Don't use third party auth to sign in
by ekianjo on Saturday November 14, 2020 @12:07PM
(#25093618)
password managers are a thing. Takes literally 20 seconds to add a new one to a new account.
Why make logging in more complex and less secure? I use a password manager but it doesn't work as smoothly as signing in with Google.
There's no good reason not to use a password manager in 2020. I recommend this one: https://www.passwordstore.org/
Re:Don't use third party auth to sign in
by kevin_thibedeau on Saturday November 14, 2020 @10:53AM
(#25093029)
No good reason until an exploit comes out that wreaks havoc.
Re:Don't use third party auth to sign in
by ekianjo on Saturday November 14, 2020 @12:07PM
(#25093626)
You can use local ones like KeePassX.
Re:Don't use third party auth to sign in
by eulers_secret on Saturday November 14, 2020 @11:45AM
(#25093424)
There’s still good reasons. Mine is using public computers (library or school), or being able to use any computer at work in private browsing mode.
It’s also trivial to have passwords which are secure and easy to remember (literally off the top of my head): MyD0gb@rk$...
Re:Don't use third party auth to sign in
by johndough on Saturday November 14, 2020 @01:34PM
(#25094411)
That is not a secure password. The phrase "mydogbarks" appears in several word lists and hashcat has had leetspeak rules for years now.
Re:Don't use third party auth to sign in
by upofadown on Saturday November 14, 2020 @11:27AM
(#25093263)
Hard to imagine what sort of exploit could come out that could cause havoc when the encrypted passwords are stored on your device.
Re:Don't use third party auth to sign in
by nitrogen on Saturday November 14, 2020 @11:44AM
(#25093413)
Imagine a vulnerability in the password manager extension that allows a hacked site to fill in and scrape every login stored in the password manager.
I do use one. Doesn't mean I want another username and password to authenticate everywhere.
Re:Don't use third party auth to sign in
by dsego on Saturday November 14, 2020 @11:34AM
(#25093331)
Is there an android app for it?
Re:Don't use third party auth to sign in
by sneakymichael on Saturday November 14, 2020 @09:17AM
(#25092417)
Ease. If you're already logged into Google, it's essentially a one click process.
Re:Don't use third party auth to sign in
by ekianjo on Saturday November 14, 2020 @12:09PM
(#25093640)
I get that. But I also don't all my services to depend on Google at all, even if it's just a login.
Re:Don't use third party auth to sign in
by sreevisakh on Saturday November 14, 2020 @02:12PM
(#25094749)
The authentication service should ideally be under the control of the user. At least, the user should be able to choose one that they trust. I doubt it's an accident that current authentication systems lack that choice.
Re:Don't use third party auth to sign in
by Kudos on Saturday November 14, 2020 @09:16AM
(#25092414)
For similar reasons that you and I use password managers, but add lower friction to the mix.
Re:Don't use third party auth to sign in
by hunter2_ on Saturday November 14, 2020 @10:08AM
(#25092707)
One could even eliminate those same tasks (not wanting to remember a new password, and not wanting to use a password manager) by setting an unmemorable password and doing a password reset using a Gmail address every time they want to log in. "Log in using Google" basically does that same sort of thing but without the tedium of all the clicking/typing. The mechanism is much different but in terms of dependencies it's really the same.
The real question is why do people use Google to sign in to other services? It never even crossed my mind no matter how long I have had a Google account.