• skysurfer@lemmy.world
    link
    fedilink
    arrow-up
    47
    arrow-down
    1
    ·
    11 months ago

    Seems someone doesn’t understand how OAuth works. It does not automatically give full access to your social media accounts, location history, and device cameras as the video says.

    Using the Google button for instance will tell you exactly what permissions are being requested every time you login. Generally, it will be name, email, language, and sometimes profile picture. Aside from the profile picture you would give all the same information anyway to create an account. At least with OAuth there is no worry about passwords, especially for people who don’t have good password practices and reuse passwords between different sites.

    • LostXOR@kbin.social
      link
      fedilink
      arrow-up
      19
      ·
      11 months ago

      What caught me most off guard was him saying that OAuth somehow grants sites access to your camera. That’s a permission controlled by the browser and not at all related to OAuth.

    • reboot6675@sopuli.xyz
      link
      fedilink
      arrow-up
      6
      ·
      11 months ago

      I’ve always had this question. When I login with Google, I know what data the website will get from my Google account. But what data can Google get from the website and my usage of it, if any? (besides, of course, that I have an account on said website).