Hacker News Reader

Usually it's pretty easy to get a Visa on arrival at most African countries, yet when I tried to add that, I was asked to log in through either Google or Facebook (I like neither). When I saw that it required my permission to use some data on my Google account even when I'm not using the site, I declined and then got a typical Rails error page.

View on HN

The permission to use some data is the minimum permission requested (Email address). The intent here is to use OAuth to allow easy logins, not harvest data. BTW, The entire site is open-source at http://www.github.com/udit99/visamapper, so not only can you a) Verify that there is no foul play, but b) send pull requests with alternative login methods.

To verify that there's no foul play, there would also need to be a way to check that the code on github is what is actually running on the site...

I'm not aware of how to implement such a check. Any ideas?

Reply on news.ycombinator.com