News for hackers. Stuff that matters.
Re:Google can ban your Android app if they think you’ve clic... by numpad0 on Wednesday April 28, 2021 @03:12AM (#26966627)
> if someone is signing up for many different services, they are probably using the same password everywhere, or ...

This is completely the case, and at least from my experience the reality is worse than what is often believed: people don’t have distinctions between websites.

i.e. if a layman registers [email protected]:correctStaple, and then they open another-sitename.invalid the other day, and presented with login screen, his intuition will be “john@.:correctStaple has to work”, because that’s what he “entered” yesterday.

Federated sign-in solves this by allowing users to use coherent id:password string for any login page without having to have distinctions between domains.

There are no comments on this comment yet.