Hacker News Reader

Comment by keithnz | Hacker News Reader

hmmmm, "No Credit Card Required" you can sign in with Github! Just give us access to all your private repositories!

Ummm, no. That's just rude.

I see signup with email+password, or google, or github. Did I miss something? It seems perfectly legit, there are alternatives, and github seems much more appropriate than facebook here.

Personally, I very much prefer people to ask me for a social, rather than storing my password.

I don't mind using github for identity, but it wants access to private repositories.

Oh got it, sorry. Yeah, I can see reasons, but they should definitely split the authorization in 2 parts if you want to also allow access to private repos.

yeah.... but it got me thinking, if you wanted to target HN people, who could quite likely have hugely intresting things in their private repositories.... create a home page like the one shown, label it with tech crunch / etc, make it look enticing, then have a login page like that ask for access to private repos, then get a bunch of HN accounts, give postive comments, and see what you can harvest :)

Since I use a randomly generated password stored in a password manager, I'd much rather they store my single-site-use random password.

I noticed that as well before I ultimately backed out.

> Public and private

I've not developed with the GitHub API, so I don't know if that just comes with the type of scope they're requesting or what. Still, wonder why they're requesting such access?

Unfortunately, there's no per-repo or per-org perms which is somewhat annoying. Enabling on a repo-by-repo basis would be insanely useful.

That's right. We need the permission to sync plugins code, and therefore have to ask for the whole set of permissions around repos :/

Can't you ask to expand the permission once that becomes relevant? I imagine that people who just want to try bubble don't want to give you all their private code.

Reply on news.ycombinator.com