More importantly why the heck would you entrust a "third party" with _passwords_... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		pmorici on Feb 2, 2014 \| parent \| context \| favorite \| on: Yahoo mail hacked More importantly why the heck would you entrust a "third party" with _passwords_ !? That just seems nuts.

spullara on Feb 2, 2014 [–]

This is why Yahoo and others have been trying to force people to use OAuth instead of collecting passwords for forever. But due to "UX" people often just grab the passwords and forward them to Yahoo to authenticate.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact