Ricochet was Manish Malik's blog from 2004 to 2008. It's preserved here as an archive. For current writing, visit manishmalik.com.

Ricochet

StumbleUpon MyPassword

Guess who’s the latest one in the list of sites wanting my gmail password to import my contacts?

StumbleUpon!

stumbleupon-import

It says “Login info is not stored in any way“. Feels like testing the limits of my paranoia….

While it’s a good idea (don’t really know - may be I’ll hate some of my friends after looking at the sites they stumbled upon … haha…), I can’t really see myself trusting individual website interop mechanisms like these. This is where MoveMyData (still in planning) sort of desktop open source applications come into the picture - and I think such apps are going to be quite useful for everybody (specifically those who really care about the data).

1 response

t3rmin4t0r

http://developer.yahoo.com/auth/

Authentication is not the same thing as authorization - the folks that as for password are confused about that distinction.