Re:Don't use third party auth to sign in
by IanCal on Saturday November 14, 2020 @09:16AM
(#25092415)
I don't want more accounts and passwords. The security seems strictly worse than just authenticating against my email provider directly.
[ Parent
| on HN ]
Re:Don't use third party auth to sign in
by ekianjo on Saturday November 14, 2020 @12:07PM
(#25093618)
password managers are a thing. Takes literally 20 seconds to add a new one to a new account.
Why make logging in more complex and less secure? I use a password manager but it doesn't work as smoothly as signing in with Google.
There's no good reason not to use a password manager in 2020. I recommend this one: https://www.passwordstore.org/
Re:Don't use third party auth to sign in
by kevin_thibedeau on Saturday November 14, 2020 @10:53AM
(#25093029)
No good reason until an exploit comes out that wreaks havoc.
Re:Don't use third party auth to sign in
by ekianjo on Saturday November 14, 2020 @12:07PM
(#25093626)
You can use local ones like KeePassX.
Re:Don't use third party auth to sign in
by eulers_secret on Saturday November 14, 2020 @11:45AM
(#25093424)
There’s still good reasons. Mine is using public computers (library or school), or being able to use any computer at work in private browsing mode.
It’s also trivial to have passwords which are secure and easy to remember (literally off the top of my head): MyD0gb@rk$...
Re:Don't use third party auth to sign in
by johndough on Saturday November 14, 2020 @01:34PM
(#25094411)
That is not a secure password. The phrase "mydogbarks" appears in several word lists and hashcat has had leetspeak rules for years now.
Re:Don't use third party auth to sign in
by upofadown on Saturday November 14, 2020 @11:27AM
(#25093263)
Hard to imagine what sort of exploit could come out that could cause havoc when the encrypted passwords are stored on your device.
Re:Don't use third party auth to sign in
by nitrogen on Saturday November 14, 2020 @11:44AM
(#25093413)
Imagine a vulnerability in the password manager extension that allows a hacked site to fill in and scrape every login stored in the password manager.
I do use one. Doesn't mean I want another username and password to authenticate everywhere.