Yeah, Adding Facebook as your sign-on adds another significant point of failure. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		joe_the_user on May 12, 2012 \| parent \| context \| favorite \| on: Facebook deliberately bans Grooveshark from its se... Yeah, Adding Facebook as your sign-on adds another significant point of failure.

patrickaljord on May 12, 2012 [–]

Not if you also ask for the user email though the Facebook API. In this case people can get access by getting a password reset sent to their email. This is what Grooveshark is doing right now and what most people using Facebook for signing in do too.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact