Hacker News new | ask | show | jobs
by nomercy400 1829 days ago
Imagine Facebook sending any app that would have 'Login with Facebook' functionality, your full profile, including your plaintext password.

Would you trust every and all third-party applications with this 'Login with Facebook' functionality, to not look at your plaintext password? Or would you rather have Facebook not send your password in the first place?