http://simonwillison.net/2009-01-02T10:48:17+00:00Simon Willison2009-01-02T10:48:17+00:002009-01-02T10:48:17+00:00https://simonwillison.net/2009/Jan/2/adactio/#atom-tag

<p><strong><a href="http://adactio.com/journal/1538">Antipatterns for sale</a></strong></p> Twply collected over 800 Twitter usernames and passwords (OAuth can’t arrive soon enough) and was promptly auctioned off on SitePoint to the highest bidder. <p>Tags: <a href="https://simonwillison.net/tags/jeremy-keith">jeremy-keith</a>, <a href="https://simonwillison.net/tags/oauth">oauth</a>, <a href="https://simonwillison.net/tags/passwordantipattern">passwordantipattern</a>, <a href="https://simonwillison.net/tags/passwords">passwords</a>, <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/sitepoint">sitepoint</a>, <a href="https://simonwillison.net/tags/twitter">twitter</a></p>

2008-12-15T17:20:08+00:002008-12-15T17:20:08+00:00https://simonwillison.net/2008/Dec/15/ffs/#atom-tag

<p><strong><a href="http://www.techcrunch.com/2008/12/15/now-you-can-sign-into-friend-connect-sites-with-your-twitter-id/">Now You Can Sign Into Friend Connect Sites With Your Twitter ID</a></strong></p> Great. Now even Google is asking me for my Twitter password. Slow clap. How’s that Twitter OAuth beta coming along? <p>Tags: <a href="https://simonwillison.net/tags/google">google</a>, <a href="https://simonwillison.net/tags/oauth">oauth</a>, <a href="https://simonwillison.net/tags/passwordantipattern">passwordantipattern</a>, <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/twitter">twitter</a></p>

2008-09-15T10:39:47+00:002008-09-15T10:39:47+00:00https://simonwillison.net/2008/Sep/15/google/#atom-tag

<p><strong><a href="http://blogs.zdnet.com/Google/?p=1141">Google wants your Hotmail, Yahoo and AOL contacts</a></strong></p> And they’re using the password anti-pattern to get them! Despite both Yahoo! and Hotmail (and Google themselves; not sure about AOL) offering a safe, OAuth-style API for retrieving contacts without asking for a password. This HAS to be a communications failure somewhere within Google. Big internet companies stand to lose the most from widespread abuse of the anti-pattern, because they’re the ones most likely to be targetted by phishers. Shameful. <p>Tags: <a href="https://simonwillison.net/tags/aol">aol</a>, <a href="https://simonwillison.net/tags/ffs">ffs</a>, <a href="https://simonwillison.net/tags/google">google</a>, <a href="https://simonwillison.net/tags/hotmail">hotmail</a>, <a href="https://simonwillison.net/tags/oauth">oauth</a>, <a href="https://simonwillison.net/tags/passwordantipattern">passwordantipattern</a>, <a href="https://simonwillison.net/tags/phishing">phishing</a>, <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/shameful">shameful</a>, <a href="https://simonwillison.net/tags/yahoo">yahoo</a></p>

2008-08-13T12:52:30+00:002008-08-13T12:52:30+00:00https://simonwillison.net/2008/Aug/13/twitter/#atom-tag

<blockquote cite="http://twitter.com/simonw/statuses/886215567"><p>The statement that the password anti-pattern "teaches users to be phished" should be rephrased "has taught users to be phished"</p></blockquote> <p class="cite">&mdash; <a href="http://twitter.com/simonw/statuses/886215567">Me</a>, on Twitter</p> <p>Tags: <a href="https://simonwillison.net/tags/passwordantipattern">passwordantipattern</a>, <a href="https://simonwillison.net/tags/phishing">phishing</a>, <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/twitter">twitter</a></p>

2008-08-09T10:18:28+00:002008-08-09T10:18:28+00:00https://simonwillison.net/2008/Aug/9/facebook/#atom-tag

<p><strong><a href="http://www.techcrunch.com/2008/08/08/facebook-security-advice-never-ever-enter-your-passwords-on-another-site-unless-we-ask-you-to/">Facebook Security Advice: Never Ever Enter Your Passwords On Another Site, Unless We Ask You To</a></strong></p> Nice to see TechCrunch highlighting the hypocrisy of Facebook advising their users to never enter their Facebook credentials on another site, then asking them for their webmail provider password so they can scrape their address book. <p>Tags: <a href="https://simonwillison.net/tags/facebook">facebook</a>, <a href="https://simonwillison.net/tags/hypocrisy">hypocrisy</a>, <a href="https://simonwillison.net/tags/passwordantipattern">passwordantipattern</a>, <a href="https://simonwillison.net/tags/passwords">passwords</a>, <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/techcrunch">techcrunch</a></p>

2008-06-04T18:03:46+00:002008-06-04T18:03:46+00:00https://simonwillison.net/2008/Jun/4/yahoo/#atom-tag

<p><strong><a href="http://developer.yahoo.net/blog/archives/2008/06/addressbook_api.html">Yahoo! Address Book API Delivered</a></strong></p> At last, now there’s no excuse to ask your users for their Yahoo! username and password just so you can scrape their address book. <p>Tags: <a href="https://simonwillison.net/tags/passwordantipattern">passwordantipattern</a>, <a href="https://simonwillison.net/tags/phishing">phishing</a>, <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/yahoo">yahoo</a></p>

2008-04-01T01:01:38+00:002008-04-01T01:01:38+00:00https://simonwillison.net/2008/Apr/1/find/#atom-tag

<p><strong><a href="http://blog.flickr.net/en/2008/03/31/find-your-friends/">Find Your Friends</a></strong></p> Flickr have added a characteristically classy friend import feature, pulling from Gmail, Yahoo! and Hotmail address books without any unhygienic password sharing. It’s a crying shame that the Yahoo! contacts API they are using isn’t available outside the company. <p>Tags: <a href="https://simonwillison.net/tags/flickr">flickr</a>, <a href="https://simonwillison.net/tags/gmail">gmail</a>, <a href="https://simonwillison.net/tags/hotmail">hotmail</a>, <a href="https://simonwillison.net/tags/passwordantipattern">passwordantipattern</a>, <a href="https://simonwillison.net/tags/portablesocialnetworks">portablesocialnetworks</a>, <a href="https://simonwillison.net/tags/yahoo">yahoo</a></p>