Unified account

lesto · 2013-11-09 12:22:54

Hi,
Why we need to have an account for the forum, one for the AUR, one for the wiki etc...?

I think these system have to use the same system, and maybe, using something like openID.
I know this is a major desing change, but..

love,
lesto

cedeel · 2013-11-09 13:26:25

OpenID might be a bit... open.

But yes, a SSO solution would be great!

ANOKNUSA · 2013-11-09 13:26:56

lesto wrote:

I know this is a major desing change, but..

There's one reason. The other big reason is that all those sites are separate: They're somewhat distinct communities dedicated to Arch, hosted in different places using different software and maintained by different people. FluxBB has one way of doing things, freenode another, the MediaWiki another... The branding is the same, but they're powered by different software and services, and the maintainers have their own ideas on how to utilize it.

Besides, in my opinion any service that aims to give easy access to the entirety of someone's online identity is encouraging ignorance and poor security habits, and doing an severe disservice.

EDIT: Spelling

Last edited by ANOKNUSA (2013-11-09 13:28:00)

Trilby · 2013-11-09 14:55:00

ANOKNUSA wrote:

any service that aims to give easy access to the entirety of someone's online identity is encouraging ignorance and poor security habits

Agreed. Though I do use the same name and info on all these sites ... so. But I'm not too concerned with security for these accounts. Email is a bit more important; banking much more so. But if someone wants to hack into my forum account and post ridiculous nonsense under my name, go for it - I doubt anyone would notice a change!

Last edited by Trilby (2013-11-09 14:55:13)

karol · 2013-11-09 15:26:23

See https://bugs.archlinux.org/task/10703

ewaller · 2013-11-09 16:44:19

Arch Linux is actually a bunch of separate projects flying in loose formation. The forums, mail lists, ABS/TUs, bug tracker, developers, Wikis, swag, etc... are all run by different (but not exclusively) people. The servers are not (necessarily) collocated. The teams communicate informally, but the structure bears more similarity to a bacterial colony than to a higher life form.

Last edited by ewaller (2013-11-09 16:45:06)

Trilby · 2013-11-09 17:12:09

ewaller wrote:

... run by different (but not exclusively) people.

Not exclusively people? Some of them are not people? What else then?

ewaller wrote:

... more similarity to a bacterial colony than to a higher life form.

Oh.

Did someone leave the tacos out overnight again?

lesto · 2013-11-10 15:29:39

But with openid i have a secured central id (2 step verification, the normal password and a time-limited password like the RSA key).
If you are looking for oversecurity, then you can still create as many "central" account you want.

in my opinion any service that aims to give easy access to the entirety of someone's online identity is encouraging ignorance and poor security habits

In my opinion too many account is encouraging username/password reuse, and only one account is too dangerous.
I would have about 3 or 4 account (the main for friends and banking, one for work, one for social media, and the last for technical forum/social media/wiki etc..).
Also poorly coded account sistem is a great danger; just look at http://xkcd.com/1286/

Arch Linux is actually a bunch of separate projects flying in loose formation. The forums, mail lists, ABS/TUs, bug tracker, developers, Wikis, swag, etc... are all run by different (but not exclusively) people. The servers are not (necessarily) collocated

this is exaclty why openId or similar is born.

Not exclusively people? Some of them are not people? What else then?

AI.

ANOKNUSA · 2013-11-10 20:41:40

Use a password manager, friend. The argument that too many accounts "encourages username/password reuse" seems disingenuous coming from someone promoting the use of a single username and password.

And you misunderstand mine and ewaller's point: For OpenID to work in the different Arch sites, the different groups maintaining them would need to petition Wikimedia, FluxBB and whoever hosts the AUR server to write new, unique code just to satisfy a minority (namely, you).

fsckd · 2013-11-11 00:32:22

previously, specifically see Pierre's posts

Oh, and Allan's posts. I guess it's all covered in that bug report the Archivist linked to...

sonoran · 2013-11-20 19:46:18

Arch organization resembles the rhizome rather than the arborescent model. Nothing primitive about it, quite cutting-edge, actually.

http://en.wikipedia.org/wiki/Rhizome_%28philosophy%29

Arch Linux

#1 2013-11-09 12:22:54

Unified account

#2 2013-11-09 13:26:25

Re: Unified account

#3 2013-11-09 13:26:56

Re: Unified account

#4 2013-11-09 14:55:00

Re: Unified account

#5 2013-11-09 15:26:23

Re: Unified account

#6 2013-11-09 16:44:19

Re: Unified account

#7 2013-11-09 17:12:09

Re: Unified account

#8 2013-11-10 15:29:39

Re: Unified account

#9 2013-11-10 20:41:40

Re: Unified account

#10 2013-11-11 00:32:22

Re: Unified account

#11 2013-11-20 19:46:18

Re: Unified account

Board footer