I never thought website log-ins could be so damn challenging

[matt819]

Have you noticed recently that damn near every website offers the opportunity to log in via with your Facebook log-in.

I don't do this, but it does make me question the extent to which my actions on non-Facebook websites becomes available on my Facebook page or, more nefariously, in the background to the NSA and other USG agencies collecting information domestically.

It's bad enough that I have to remember all my passwords or use password storage programs to manage log-ins in scores of sites. Now I have to wonder whether the log-ins themselves expose me to risks well beyond that of the individual website I'm logging into.

For the "surveillance is just dandy" crowd, this probably isn't a problem. After all, these folks aren't doing anything wrong, so what does it matter who has their metadata or just plain data, or whatever. This may be the case now, but it won't stop there, and, really, you know it.

[MineralMan]

1. Everytime you do that, the website has access to your

entire list of Facebook friends and more. The result: Unending spam.

[Recursion]

2. Centralized Authentication has been a sysadmin's nightmare and a developer's wet dream for years

And Facebook and Google essentially made it happen by market penetration.

There are security trade-offs with this; as someone on the sysadmin side of things I dislike them.

[hobbit709]

3. The only place I use a FB login is on FB.