|
newton.saber wrote: Uhh...facebook, even if you go down, I should be able to get to the OAuth piece so make it work!!
However, I do believe this points out why you SHOULD NOT use facebook as your OAuth login provider. That makes sense.
There are only 10 types of people in the world, those who understand binary and those who don't.
|
|
|
|
|
|
Wish I could. Unfortunately, it is a great way of staying in touch with children, relatives and old friends when we live on different continents.
|
|
|
|
|
Farcebook came on line here in Florida a minute ago.
How do we preserve the wisdom men will need,
when their violent passions are spent?
- The Lost Horizon
|
|
|
|
|
|
newton.saber wrote: If you use Facebook as your Social Login at other sites
Sounds like an "all eggs / one basket" issue -- best avoided.
I don't use sites that only allow access from some other site.
|
|
|
|
|
PIEBALDconsult wrote: Sounds like an "all eggs / one basket" issue
I understand your point and I agree with you from the "yes, all the hype about single sign on is really just that since humans fail at everything" standpoint.
However, I also believe in single sign on via OAuth because it is quite a bit safer having fewer access points for the hackers to get you and having fewer passwords to remember.
However, I'm sure you'll say, "fewer access points for hte hackers to get you, are you crazy?!"
But, I'm saying it in an exaggerated way like:
"if humans could do one simple thing right like give me one super-secure sign on that is always guarded so that no hackers could ever get through."
However, I know, humans cannot do anything right.
|
|
|
|
|
Riiiight... don't count on achieving the unachievable.
Having one access point means all the hackers will focus on that one point.
|
|
|
|
|
Proliferation of passwords. They'll never get me because I've got hundreds of them.
A different one for every site. I have them all written down in a notebook here at my desk labeled:
PASSWORD LOG BOOK -- KEEP OUT!!!
|
|
|
|
|
|
|
Yes, it is a failed system and the owner/creators should pull it immediately.
It must have 100% uptime or it is a failure.
Imagine if the key to your car only worked 99.9% of the time!
|
|
|
|
|
newton.saber wrote: If you use Facebook as your Social Login at other sites
Lost me there.
|
|
|
|
|
|
Frist reason why I do not usually use FB login. The second is that they can peruse through your posts and informations, I once published a strong and politically uncorrect opinion on a site which I visit only sporadically... and found the company I work for written beside my name.
Now, of course it didn't happen anything - and I pulled off from "Public" my company's name, but that's bad privacy, other than a single point of access. A single virus or attack or backdoor on one of my devices connected to FB and I would be fried all over the world. Just a big nope.
The only problem I have with many passwords is that many sites
- Store them in a retrievable way
- Do not accept not alfanumeric characters (so no %$&£#@) which of course I use
- Are limited in lenght!! My Inusracne company and other sites limit the size of password TO 8 characters maximum.
GCS d--- s-/++ a- C++++ U+++ P- L- E-- W++ N++ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t++ 5? X R++ tv-- b+ DI+++ D++ G e++>+++ h--- ++>+++ y+++* Weapons extension: ma- k++ F+2 X
If you think 'goto' is evil, try writing an Assembly program without JMP. -- TNCaver
"When you have eliminated the JavaScript, whatever remains must be an empty page." -- Mike Hankey
|
|
|
|
|
All great points and I agree.
Also, I've found that there are lot of sites which limit the password in different ways.
It is as if someone completely backwards on security has designed the system.
Oh, wait, I think I've figured out the problem.
|
|
|
|
|
newton.saber wrote: Oh, wait, I think I've figured out the problem. Urgent simple user/pass login screen code plz?
GCS d--- s-/++ a- C++++ U+++ P- L- E-- W++ N++ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t++ 5? X R++ tv-- b+ DI+++ D++ G e++>+++ h--- ++>+++ y+++* Weapons extension: ma- k++ F+2 X
If you think 'goto' is evil, try writing an Assembly program without JMP. -- TNCaver
"When you have eliminated the JavaScript, whatever remains must be an empty page." -- Mike Hankey
|
|
|
|
|
I haz da codz.
Rot-13 should do.
https://en.wikipedia.org/wiki/ROT13[^]
string EncryptPwd(string clearPwd)
{
string cipherPass = string.Empty;
foreach (char c in clearPwd)
{
cipherPass += Convert.ToChar(c + 13);
}
return cipherPass;
}
string DecryptPwd(string cipherPwd)
{
string clearPass = string.Empty;
foreach (char c in cipherPwd)
{
clearPass += Convert.ToChar(c - 13);
}
return clearPass;
}
NOTE: I marked this as joke, but someone will come along and use it for their SUPERSECURE Web Site.
|
|
|
|
|
Good grief, I really think my car insurance and the national train service actually use this code.
GCS d--- s-/++ a- C++++ U+++ P- L- E-- W++ N++ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t++ 5? X R++ tv-- b+ DI+++ D++ G e++>+++ h--- ++>+++ y+++* Weapons extension: ma- k++ F+2 X
If you think 'goto' is evil, try writing an Assembly program without JMP. -- TNCaver
"When you have eliminated the JavaScript, whatever remains must be an empty page." -- Mike Hankey
|
|
|
|
|
|
|
No; it's perfectly fine here.
|
|
|
|
|
Time will solve it, I'm pretty sure, Blatter will be blatted
[Edit]
Either by the Swiss justice if they "do not pick up the tail", or it is because the world public. But I like to mention: This is absolutely no thing where US needs to judge
[/Edit]
modified 19-Jan-21 21:04pm.
|
|
|
|
|
If the rest of the world would've cleaned house on their sport years ago, the DoJ wouldn't be having to spend my tax dollars trying to clean up your cluster elephanted Augean Stables for you.
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
That sounds very very angry
[Edit]
Why, why US needs to take care about that? Because Soccer is that popular in US? I don't think so... it is only that some attorneys like to make big Money.
modified 19-Jan-21 21:04pm.
|
|
|
|