Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What makes me nervous about singing into a site through Facebook is I don't know what kind of permissions I'm giving to the site regarding my FB account.


Facebook always displays an allow page with what data the site is requesting.


Will it always do that? Are there any implicit allowances? Will there be in the future? For what's true now, I could look it up. But I'd rather not. For what will be in the future, I have no idea. The simplest thing for me to do is use my Facebook account for Facebook only.


Any information you put on Facebook is susceptible to being used in ways you don't know of or have not authorize for. All information on the internet is like this for that matter. At least currently with Facebook Connect sites FB displays an authorize display laying out the information accessible.


Yes, exactly. That is the mental model I have for Facebook: only share what I'm comfortable sharing with the world. It's a simple mental model, and I like keeping it that way. Dealing with "Do you want to allow...?" dialog boxes breaks this mental model, and doing anything with another webpage gets a big "NO" from it.

I'm conservative about what I put on FB for this very reason. I consider logging into another site with my FB account part of "what I put on FB."


Exactly. This is the reason that I am far more comfortable using my Google or Yahoo OpenID than a Facebook login.


Why? Because these companies are less likely to sell your data to third parties? You know Google has pretty well always read your gmail right?


> You know Google has pretty well always read your gmail right?

That is a loaded question that does not cover how and why google uses your emails.


What are you talking about? It doesn't matter why they're doing it today. It matters that they're doing it. Even if you're naive enough to buy into "don't do evil", surely you realize that it wont always be that way.


Unless that site is Yelp. Or Pandora. Or...

"Always" is meaningless for SAAS that you don't pay for.


Oh yes. Never write in absolutes on HN.

I don't know about Yelp but Pandora asks permission. http://www.flickr.com/photos/4braham/5030673157/


When the service was launched, it did not. And I'm certain Facebook will make a similar 'mistake' again, now that the controversy has died down a bit.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: