Hacker News Reader

Comment by thosakwe | Hacker News Reader

Well, this is pretty disappointing. Docker doesn’t let you install it without an account, so I registered and used it for maybe a day in all. And poof, there goes my account data.

I’m just hoping that I was using a password manager by then.

Any word as to the cause of this? Was something important stored in plaintext, etc.?

View on HN

You can brew cask install it on a Mac without an account

> Well, this is pretty disappointing. Docker doesn’t let you install it without an account, so I registered and used it for maybe a day in all. And poof, there goes my account data.

Eh? Doesn’t let you use what without an account?

Anyone can pull images anonymously. An account is only for publishing.

Installing Docker for Mac/Windows has required users to login for awhile now.

It doesn’t require one to use it. I use it daily on MacOS and I don’t have an account.

It requires one to download the installer: https://hub.docker.com/editions/community/docker-ce-desktop-...

Notice the big "Please Login to Download" button.

True, they make it look required there, but you can use one of the direct download links instead (eg linked from https://docs.docker.com/docker-for-mac/release-notes/) or use Homebrew to install it.

The problem is more that they make it harder to find if you don’t log in, which is really not great. But if you don’t want to create an account there is certainly no need to do so.

Downloading Docker CE for mac or windows requires an account.

https://github.com/docker/docker.github.io/issues/6910

Direct links still work.

Mac: https://download.docker.com/mac/stable/Docker.dmg

Windows: https://download.docker.com/win/stable/Docker%20for%20Window...

True, but they deliberately obfuscate that to get people to sign up. Not a great look.

This is the opposite of what it actually should be. All the startups of the world, please ask least amount of personal information or none at all -- for all we know these things are bound to happen.

I downloaded it last week without an account. It involved one of those non-obvious skip button dark patterns.

They say "accessed database," so I'm thinking SQLi.

SQLi that managed to access only a single shard though? Hm.

It sounds more like a developer environment got exposed with prod data on it.

This going by the way it's worded "single hub database with a subset of non financial data"

Yeah, I got that vibe too.

Reply on news.ycombinator.com