Hacker Newsnew | past | comments | ask | show | jobs | submit | apinter's commentslogin

I solved this problem by using software. Using your current brain state is a terrible seed for randomness.


While I agree that there are problems with access granularity for Twitter, the author ignores the access models of the other providers. Facebook for one provides an extremely rich set of granular controls. The grant screen, is however 1 page, so maybe that is why he chooses not to analyze Facebook further.

I also believe that the author has some fundamental misconceptions about OAuth. OAuth is merely a standardized way of gaining access to proprietary APIs. There is nothing in the specification about what sort of level of permission an access token will provide the consuming site. The statement: "And KanyeAnalysis™ uses OAuth, which lets you use your Twitter credentials to sign in!" is misleading and makes OAuth sound much more like OpenId than it really is.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: