9 ms·
tying this data to a login instead of a pure cookie model like hn seems dangerous.
by coderatlarge 9mo ago
tying this data to a login instead of a pure cookie model like hn seems dangerous.
- bwb 9mo agoThis feature doesn't require a login; you just put in the book/author you love, and it returns matches. If you want to vote, you'll need to log in. We needed substantial protection around the votes, and this was the easiest way to do so. Would you want a magic link that sends you a url to vote to your email or something like that?
- coderatlarge 9mo agowell hn allows voting without email
- bwb 9mo agoAh, I see, you want to be able to create an account without an email? Can you confirm that is what you prefer? We have to screen very carefully for fraud from overzealous authors, unfortunately. Email is a nice tool in that.
- coderatlarge 9mo agono ties to my other accounts would be ideal from my perspective i understand that it’s easier to get a stronger “trust” signal by being more invasive but hopefully the product will be so valuable that users will value their accounts as assets (like on hn) that they won’t want to compromise with bad behavior
- bwb 9mo agoThe problem is authors will sign up for fake accounts to vote for their own books, so having an email with each account is a big trust factor that helps us a bit. I'll think on it :)
- coderatlarge 9mo agomaybe an account has to build up cred or investment to be more trusted like on hn