Hacker News new | ask | show | jobs
by xyst 674 days ago
In your “What can I do” section, should add:

“do not add google/apple/facebook(meta)/github sign on in the first place”

Not only are we centralizing identity to entities known to shutdown accounts for vague reasons. It can introduce painful debugging issues, increased support costs, and loss of sales.

Personally, dealt with an issue where a user signed up with “Sign in with Apple” but forgot whether they provided Apple associated email address or the “ @privaterelay.appleid.com”

Also, emails sent to the private relay address would occasionally bounce… Very frustrating and time I will never get back lol

3 comments

The most painful is when a user first logs in using "sign in with Google" and then subsequently using "sign in with Apple" without understanding that they now have two separate accounts. People don't understand that these two accounts are completely separate when they see that their Apple ID email is a Gmail, or when they have a Google account using their iCloud email.
As a developer I can sympathize having dealt with frustration implementing SSO but as a user (and I'm aware I may be in the minority on HN) I've bailed out of trying quite a few webapps that don't offer Sign in With Google or Sign in With Apple.

There is a psychological effect where I dread the image of whatever half broken bespoke registration flow or inane password requirements someone came up with when I only see a "Create Account" button.

That may not make a difference for signing up for an account at like a bank or something I truly need but for say a Show HN for Yet Another Thin Layer Over GPT #372 the odds are high I'll just click back and move on with my life.

It isn’t for everyone, but I can’t imagine not using 1Password + Fastmail’s masked emails for registrations anymore.

All the privacy of throwaway email addresses with strong passwords. Services can store passwords in plaintext and use public blockchains as databases for all I care.

Figuring our which service leaked my email and blocking all messages from it is one click away.

For me it is the exact other way around. If you don't have any other sign up system, I will bail immediately. I have a Google account, but it is "empty" and only used for settings and Android phones.

I don't want Google to know which services I am using and I had accounts shut down by big tech for non-specified reasons, probably because I didn't want to share my phone number.

Same issues could materialize that we have with Chrome now. I don't want to watch an ad when I log in to something.

It's pragmatic if you're making (Android) apps, in which your payments are already tied into it, and you're already at Google's whims.

But websites shouldn't copy the ideal UI for Android and so on.