Hacker News Reader

I see. Yes, that's what I thought as well, privacy issue.

But from the visitors point of view, if they use one email for all their forums/site/etc, wouldn't it be the same thing? If I am a user who value my privacy, I would not want to sign in via FB, instead I would use one email and one password for all. Easy to remember as well.

That's why I do not see why FB Connect is an important feature.

View on HN

One email, but a user would have to be a fool to use the same password across all the sites. Van Neumann knows we have plenty of those, though.

But wouldn't the same user a fool as well using FB connect as a login to all the forums and marketplaces? If one manage to crack his FB account, then go to the apps list, and sure the hacker has access to all of the forums, marketplaces, and other sites that uses FB Connect.

On the other hand, if you use one email and same password across all sites (but different email password), even if the hacker hacks the email, the hacker does not have the access to forums, marketplaces, etc. The hacker would have to hack each individual sites.

I suggest a thorough course in security threat analysis and attack surfaces.

Reply on news.ycombinator.com