Hacker News Reader

Comment by jonchang | Hacker News Reader

People also hate having to create a new username/password combination for every single web service they want to try.

I'd say most people have one username/password combination they use for every service. On mobile devices, having to sign up with an email and password is a bit of a hassle, and Facebook/Twitter login makes more sense.

Anecdata point (new favorite word) from someone who in theory should "know better": I have my corporate password, a bank password, personal email password, and one I've been using literally 80% of my life for all the other sites. It's got a Couple variations to get around silly restrictions. In its base form, it's a 6 letter dictionary word. Why? I don't care! I don't want to devote any more energy to the problem than strictly necessary and those sites aren't getting any data I care much about.

PS: 2 factor for corporate account and personal email

Some people, but not this person. I like having a separate login for each web service. I keep each login in my password wallet so even I don't know the password. Using this approach, if a service gets compromised, I don't need to worry that my access will spread to other systems.

I also like email/password signups because I get to use different emails for each service. GMail helps with this since I can use johndoe+twitter@gmail.com and johndoe+facebook@gmail.com.

Only that most signup forms use a broken regex and think <name+mailbox@example.com> emails are not valid. Been there, done that.

I don't trust such services much. always use my default :)@domain.com which is also valid according to the RFC

But not enough to make me use Facebook and definitely not enough to even bother with Twitter.

Perhaps this is just luck on my part, but I don't think I've ever had a "Sign-in with Twitter" app spam un-authorized tweets on my behalf.

I agree, I'd much rather sign in with Twitter than facebook.

Reply on news.ycombinator.com