News for hackers. Stuff that matters.

A comment on Spotify and Facebook: Is that phishing?. Parent comment

Re:Spotify and Facebook: Is that phishing? by dkersten on Friday February 22, 2013 @01:27PM (#5265726)
And yet that in no way gives them the right to use that to log into your facebook (rather than using the API to authenticate) and install the spotify facebook app (giving themselves whatever permissions they like without asking the user).

Of course, the lesson here (besides that spotify cannot be trusted) is that you should never use a password for more than one account. Sure makes me glad I switched to using a password manager that uses randomly generated different passwords for each service I sign up to.

[ Parent | on HN ]
Re:Spotify and Facebook: Is that phishing? by Superanos on Friday February 22, 2013 @01:48PM (#5265862)
Facebook and Spotify are tightly partnered together - at one point they actually REQUIRED the use of Facebook to log in. The option to register without Facebook was only reintroduced recently.
[ Parent | on HN ]
Re:Spotify and Facebook: Is that phishing? by nodata on Friday February 22, 2013 @04:24PM (#5266936)
Irrelevant: the point was that Spotify doesn't have permission or ask permission for what it does.
[ Parent | on HN ]
Re:Spotify and Facebook: Is that phishing? by Superanos on Friday February 22, 2013 @07:16PM (#5267835)
For Facebook they do. They have a tight partnership. If Spotify did something wrong with their Facebook app, Facebook would have removed their app a long time ago.
[ Parent | on HN ]
Re:Spotify and Facebook: Is that phishing? by elbear on Saturday February 23, 2013 @10:19AM (#5269861)
Permission from the user not from Facebook.
[ Parent | on HN ]
Re:Spotify and Facebook: Is that phishing? by seivan on Friday February 22, 2013 @02:33PM (#5266216)
Not true, I don't use Facebook and I was one of part of the Open Beta many years ago.
[ Parent | on HN ]
Re:Spotify and Facebook: Is that phishing? by mitchty on Friday February 22, 2013 @02:42PM (#5266260)
In the US, when spotify first opened up to Americans you could sign up without facebook credentials. About a month later, they decided to go facebook only for new setups.
[ Parent | on HN ]
Re:Spotify and Facebook: Is that phishing? by Superanos on Friday February 22, 2013 @02:47PM (#5266293)
Spotify started requiring a Facebook login from all new users on 22nd September 2011. On 6th December 2012 they put the non-FB signup option back. You signed up before they required FB so you never saw the requirement.
[ Parent | on HN ]
Re:Spotify and Facebook: Is that phishing? by RexM on Friday February 22, 2013 @02:41PM (#5266256)
If you read the reply again, they allowed you to use a username, then required facebook, then reintroduced the ability to user a username. You probably were using a username, before they started requiring facebook.
[ Parent | on HN ]