News for hackers. Stuff that matters.

A comment on Ask HN: Developer abused “sign in with GitHub”?. Parent comment

Re:Ask HN: Developer abused “sign in with GitHub”? by netheril96 on Friday December 09, 2022 @02:54AM (#33918798)
GitHub could not control what lies other websites tell. They can have a button saying “Sign in with GitHub”but totally not signing in with GitHub.

That said GitHub should have banned that website for lying and abusing instead of OP.

[ Parent | on HN ]
Re:Ask HN: Developer abused “sign in with GitHub”? by easyorgmode on Friday December 09, 2022 @03:52AM (#33919149)
This proves the point that these third party "Sign in with" buttons are really dangerous.

It makes a possibly dodgy website look more secure and legit by using a well known provider like Github for the login process.

In addition, it potentially exposes data from that well known provider, which is often sensitive data, as in the case of Github.

[ Parent | on HN ]