How can #facebook or #google or anything steal your passwords ?

Futureized

Futureized

Skilled
Most of goverment websites allow, logging in through this channels #google #facebook.. etc.
Since everything belongs to non-Indian companies and majority of services are linked with both.
Can those create a havoc ?

Even, some/lot of public/private services in India does allow authentication from #google or #facebook ?
(MOST ARE NON-INDIAN SERVICES).
 
I think they follow the OAuth protocol and are authenticated against the Google or Facebook servers and the communications happens over SSL so chances of someone stealing them are less, unless you have a MITM
 
Futureized said:
Most of goverment websites allow, logging in through this channels #google #facebook.. etc.
Since everything belongs to non-Indian companies and majority of services are linked with both.
Can those create a havoc ?

Even, some/lot of public/private services in India does allow authentication from #google or #facebook ?
(MOST ARE NON-INDIAN SERVICES).
Click to expand...
the authentication is done by tech companies, not govt websites, so you're pretty safe. Just make sure you enable HTTPS everwhere
 
Futureized said:
Most of goverment websites allow, logging in through this channels #google #facebook.. etc.
Since everything belongs to non-Indian companies and majority of services are linked with both.
Can those create a havoc ?

Even, some/lot of public/private services in India does allow authentication from #google or #facebook ?
(MOST ARE NON-INDIAN SERVICES).
Click to expand...

Its safer than if all websites allowed you to login through their own servers and didn't care about security. Here you will be redirected to Google or FB or whatever company's authentication servers over https and login as your Google /FB / xyz account credentials and not as another new username password combination. So your question of Google /FB /xyz stealing passwords is foolish because you are using yout own Google /FB /xyz username password to login. There's nothing for them to steal here because you have already saved your password and account on their servers.

Basically this is another form of sly, in your face data harvesting. The companies make a profile of you by getting to link your Google / Facebook / xyz account and get data from Google / FB etc. Google even warns you what data will be shared with the app or website if you allow them to link to your account. Both Google / FB / xyz and these companies will harvest your data and have ai see what sites you have logged in and target you with relevant ads.
 
Last edited:
Back
Top