Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is terrible idea. People will be able to claim Yahoo IDs and use them to take over other people’s identities with a few password resets. I have a Yahoo email address simply as a backup for GMail. Just because I don't sign in very often doesn't mean that it is safe to hand over to someone else!


Wired agrees with you ("a spectacularly bad idea"): http://www.wired.com/threatlevel/2013/06/yahoos-very-bad-ide...


Wow. a 'journalist' that writes an op'ed piece and does not even mention trying to contact the company.


At the bottom of the page: "Wired has reached out to Yahoo for comment."


Notice that it was written by Mat Honan.


This was my first thought. I've seen this done on a large scale with hotmail, where addresses automatically expire after a certain period of disuse.


But a year? Come on.


What if, five years ago when you signed up for purephase1234@gmail.com, you listed purephase1234@yahoo.com as your recovery address?

Now, thanks to this move by Yahoo, your Google account is in danger of being compromised.


Which, honestly, it kind of a dumb move on Google's part. I was never a fan of that recovery address process. The 2-factor auth they've implemented since is much better.


A year is a very short period of time. Many people have been active on the internet for decades.


What if the person doesn't have access to the internet for a year?


.. and Yahoo or any other similarly priced services should know this how?

Meaning, you get what you paid for and if your usage of said service falls outside of an expected range then don't be surprised if your service is suspended.

It's 2013. I feel like this particular lesson should be well established, public domain knowledge but here it is again:

Free data, storage and associated services means that you are the product. If a provider decides to discontinue a particular product line, that really is their prerogative. If you want otherwise, then pay for the services you use and rely on and then you'll have a valid complaint if they are suspended.


They are not discontinuing their product line or even canceling service for some of its customers. What they do is effectively transferring online identities they granted from less deserving, from their perspective, users to more deserving ones.

There is a lot of problems with this from both from security and moral points of view.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: