News for hackers. Stuff that matters.
Re:Don't use third party auth to sign in by IanCal on Saturday November 14, 2020 @09:16AM (#25092415)
I don't want more accounts and passwords. The security seems strictly worse than just authenticating against my email provider directly.
Re:Don't use third party auth to sign in by ekianjo on Saturday November 14, 2020 @12:07PM (#25093618)
password managers are a thing. Takes literally 20 seconds to add a new one to a new account.
Re:Don't use third party auth to sign in by IanCal on Sunday November 15, 2020 @12:05PM (#25102658)
Why make logging in more complex and less secure? I use a password manager but it doesn't work as smoothly as signing in with Google.
Re:Don't use third party auth to sign in by gspr on Saturday November 14, 2020 @10:37AM (#25092893)
There's no good reason not to use a password manager in 2020. I recommend this one: https://www.passwordstore.org/
Re:Don't use third party auth to sign in by kevin_thibedeau on Saturday November 14, 2020 @10:53AM (#25093029)
No good reason until an exploit comes out that wreaks havoc.
Re:Don't use third party auth to sign in by ekianjo on Saturday November 14, 2020 @12:07PM (#25093626)
You can use local ones like KeePassX.
Re:Don't use third party auth to sign in by eulers_secret on Saturday November 14, 2020 @11:45AM (#25093424)
There’s still good reasons. Mine is using public computers (library or school), or being able to use any computer at work in private browsing mode.

It’s also trivial to have passwords which are secure and easy to remember (literally off the top of my head): MyD0gb@rk$...

Re:Don't use third party auth to sign in by johndough on Saturday November 14, 2020 @01:34PM (#25094411)
That is not a secure password. The phrase "mydogbarks" appears in several word lists and hashcat has had leetspeak rules for years now.
Re:Don't use third party auth to sign in by upofadown on Saturday November 14, 2020 @11:27AM (#25093263)
Hard to imagine what sort of exploit could come out that could cause havoc when the encrypted passwords are stored on your device.
Re:Don't use third party auth to sign in by nitrogen on Saturday November 14, 2020 @11:44AM (#25093413)
Imagine a vulnerability in the password manager extension that allows a hacked site to fill in and scrape every login stored in the password manager.
Re:Don't use third party auth to sign in by IanCal on Sunday November 15, 2020 @12:04PM (#25102649)
I do use one. Doesn't mean I want another username and password to authenticate everywhere.
Re:Don't use third party auth to sign in by dsego on Saturday November 14, 2020 @11:34AM (#25093331)
Is there an android app for it?