Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I came across the same realization after disconnecting from twitter. I am signed into multiple places using twitter. Even though I have deactivated my account, I have to reactivate every time to login on a site like disqus.

FB, Twit, Goog, need to separate oauth login from the rest of their service.



You say the morally correct thing, but being a Managed Identity Provider is gonna cost loads of money and they really have no business incentive to do this, in fact it may be negative for some of their KPIs like the no. of sign ups they have on their site.

The best course of action would have been for you to de-couple your Identity Provider from your account completely, I have done that over a course of a few months. I have de-coupled myself from Google Sign in on my most frequented sites, using Email + a Password manager + 2FA wherever its supported. though I have also have even used Apple's sign in for some apps


Can you trigger the reset password flow on disqus, etc? That’s what I’ve done on a few sites to disconnect from 3rd party oauth and use email instead.


I reactivated to disconnect disqus. But twitter does not share email address with sites so i could not do forgot password. That is why it was my preferred login technique.


Anyone know how to list which sites I used my twitter login on?


Don't know about twitter, but most providers have some sort of "Applications" tab in the user settings that lists every site you gave an oauth grant to.


https://twitter.com/settings/connected_apps

Kinda deeply nested into settings submenus.


It shows blank for me. And I know have had more than three sites that used it.

I think that is for third party apps that help you tweet. I never used any.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: