How can #facebook or #google or anything steal your passwords ?

[Futureized]

Most of goverment websites allow, logging in through this channels #google #facebook.. etc.
Since everything belongs to non-Indian companies and majority of services are linked with both.
Can those create a havoc ?

Even, some/lot of public/private services in India does allow authentication from #google or #facebook ?
(MOST ARE NON-INDIAN SERVICES).

 

[vishalrao]

may i ask why the hashtags all over the place? does it trigger something like on twitter?

 

[letmein]

may i ask why the hashtags all over the place? does it trigger something like on twitter?

He thinks it's #hip and #cool.

 

[tommy_vercetti]

I think they follow the OAuth protocol and are authenticated against the Google or Facebook servers and the communications happens over SSL so chances of someone stealing them are less, unless you have a MITM

 

[adventureguy]

Most of goverment websites allow, logging in through this channels #google #facebook.. etc.
Since everything belongs to non-Indian companies and majority of services are linked with both.
Can those create a havoc ?

Even, some/lot of public/private services in India does allow authentication from #google or #facebook ?
(MOST ARE NON-INDIAN SERVICES).

the authentication is done by tech companies, not govt websites, so you're pretty safe. Just make sure you enable HTTPS everwhere

 

[Mr.J]

I'd be more concerned about giving my data to Indian companies than to non-Indian companies.

#SayNoToHashtags

 

[6pack]

Most of goverment websites allow, logging in through this channels #google #facebook.. etc.
Since everything belongs to non-Indian companies and majority of services are linked with both.
Can those create a havoc ?

Even, some/lot of public/private services in India does allow authentication from #google or #facebook ?
(MOST ARE NON-INDIAN SERVICES).

Its safer than if all websites allowed you to login through their own servers and didn't care about security. Here you will be redirected to Google or FB or whatever company's authentication servers over https and login as your Google /FB / xyz account credentials and not as another new username password combination. So your question of Google /FB /xyz stealing passwords is foolish because you are using yout own Google /FB /xyz username password to login. There's nothing for them to steal here because you have already saved your password and account on their servers.

Basically this is another form of sly, in your face data harvesting. The companies make a profile of you by getting to link your Google / Facebook / xyz account and get data from Google / FB etc. Google even warns you what data will be shared with the app or website if you allow them to link to your account. Both Google / FB / xyz and these companies will harvest your data and have ai see what sites you have logged in and target you with relevant ads.