Re:Don't use third party auth to sign in
by wolco2 on Saturday November 14, 2020 @10:31AM
(#25092847)
Your generation might be guilty. But those that came before and after knew better. This is the generation who thought using their real names online was a good idea. That's where things went wrong.
Never in my life did I see an Oauth libruary and think this is easy as pie. Overcomplicated perhaps.
Re:Don't use third party auth to sign in
by harrisonjackson on Saturday November 14, 2020 @10:47AM
(#25092981)
There is no generation that has a great track record with security.
When I got started programming full time, tons of people in the software industry were getting their rocks off on how simple it is to install an Oauth library, making it easy as pie for people to sign in to a web service, thus encouraging more sign ups and making more money.
Maybe we've forgotten just how much of a hard-on we and the entire world once had for the likes of Google. 8 years ago, we would have trusted Google with our entire future. Politicians were on board, too, and have made many deals with Silicon Valley which ended up giving these firms a certain level of immunity.
We're all guilty.