undefined | Better HN

0 pointsdetaro5y ago0 comments

And you claim that doing more to stop people from giving their google account password to "random apps" (I personally trust youtube-dl a lot too, but "random apps" is what it comes down to) and forcing those apps to use OAuth to obtain scoped tokens has "nothing to do with security"?

0 comments

pjc505y ago

Security for whom? Locking the user out of the software they want to use is not improving security for them.

detaroOP5y ago

That's only true if you assume the user is perfectly capable of evaluating the trustworthiness and quality of the software they want to use. It's understandable that that's not the assumption Google designs their security under. Yes, that sometimes somewhat sucks for us power users.

kortilla5y ago

That’s a pretty fake excuse IMO as long as the browser keeps rendering web pages that look like Google’s sign-in page.

dleslie5y ago

If that were all that they were doing I might agree; but they are blocking browser identity misrepresentation and automation, as well; it also requires that all "browsers" have a complete implementation of web standards.

It explicitly blocks "headless" browsers.

> You must confirm that your browser does not contain any of the following:

> Headless browsers

> Node.js

> Text-based browsers

j / k navigate · click thread line to collapse