Hot answers tagged

31

The obvious choice: Guaranteed to exist and be supported by Stack Exchange for as long as Stack Exchange exists.


29

Based on the reasons given, it sounds like a reasonable step to remove WordPress as a standard selection option (although with a less than optimal short notice!). However, having to type in something manually each time will be a pain, so I would suggest that you replace the button with a "My Favorite OpenID Provider" button, which then fills in a user ...


24

Managed to add new Stack Exchange OpenID to my Stack Overflow account this way: Create new stackexchange account Login on https://openid.stackexchange.com/account/login to reach https://openid.stackexchange.com/user and click the "Use your own URL to log in" link Then copy the copy the url from the second entry similar to: https://openid.stackexchange.com/...


21

Even though we aren't responsible for any third-party support or lack thereof, MyOpenID affects Stack Exchange users, so yes, it is a good idea for us to warn people that they might want to move away from it. I'm exploring what the best way to reach users who only access Stack Exchange through MyOpenID. We will prompt them in some manner to add an ...


20

PBKDF2 based on HMAC-SHA1 with twenty-thousand iterations (the latter is set in our configuration). Just check the code (search for SecureHash and go from there).


19

Logins used on the Stack Exchange network (excepting Careers Stack Overflow) in the last 180 days (as of 2013-03-05): Google 389,341 Stack Exchange 105,598 Facebook 65,854 Yahoo 25,223 MyOpenID 14,950 Other 3,648 Launchpad 1,842 Verisign 718 Wordpress 671 ClaimId 471 ...


18

This question has been analyzed, from a technical perspective, over on IT Security.SE: see Appropriate password requirements for a login (OpenID) service/provider/delegate/thing. (See also Recommended policy on password complexity.) For instance, I'll highlight my answer, where I argue against going overboard on password restrictions, based upon usability ...


16

Someone is either playing a joke on you, or doing this to simply rattle you. They've been using your email across a few IP's to create unregistered accounts on random sites, where they basically paste the contents of your profile into a question. I've deleted four fictitious accounts so far, and I'm on the lookout for more. I've also made sure that the ...


15

You don't. Google dropped support for OpenID on April 20th. Presumably they thought this was a great way to celebrate Hitler's birthday. You can still log into Stack Exchange using Google because we rigged up something to support OAuth - "The New Hotness™" - behind the scenes. It looks like OpenID, mostly, and we make it work for old accounts by ...


14

If you have your own domain and homepage, the best you can do is using that as your OpenID account. Fortunately you don't need to set up a whole OpenID server there, as OpenID supports delegation. Just register to an OpenID provider which supports delegated accounts (MyOpenID was like this, but fortunately Stack Exchange is also okay), and add the following ...


12

I forget why this was a concern before (it might have been from before the user merging queries were written), but the current reason is just that it hasn't been implemented. Strictly speaking, merging users is possible in Data Explorer, it's just not set up yet to do it automatically in the case you're describing. I've got a todo item to make sure it's ...


12

Once upon a time, you used MyOpenID to log in on Stack Overflow. But back in August, you removed that credential from your account, adding instead a Google account and relying on that to authenticate you. Then, today, you tried to log in with your MyOpenID credentials again. Since those were no longer associated with your account, a new account was created. ...


11

So, I looked around and found out that yes, both the data explorer and stackexchange.com still have a few obsolete openId providers listed in the login / signup options. I have pushed fixes to both, which will remove claimId (and a couple of others) that are no longer in operation. The obsolete openId providers will be gone in the next builds of either. ...


11

I've experienced the same issue since about the time the login system for SE sites changed. I finally managed to go around it. For me the case of this exact issue turned out to be HTTPS Everywhere. Disabling the addon allows for the login to work without issue. Enabling it again afterwards doesn't cause any issues with the rest of the site. The root cause ...


10

We refresh your authentication cookie pretty aggressively to help deter theft - this refresh can happen on any url that needs to know who you are. I introduced a bug that would access a user's cookie on routes that didn't need it, e.g. a feed of bug questions. The access happened after headers had already been sent, meaning the cookie refresh couldn't take ...


10

"Log in with Stack Exchange" is for folks who have created one of our own OpenID accounts. You don't have one of those far as I can tell. You're signing in with your Google account, so choose "log in with Google" instead. You can see what credentials you have on file with us by going to your profile while logged in and clicking "my logins". If you want to ...


10

It's not actually up most of the time even though it's supposed to still be operational. We don't want to even implicitly encourage people to sign up with myOpenID, so we removed the button. You can still sign in with it (assuming the service works) entering your myOpenID URL manually after clicking "show more login options" on the login page. Far as ...


10

Good idea, but I think the phrasing of "Other accounts not found" needs work. It sounds very negative and almost reads like an error message. For a user with existing accounts and is familiar with Stack Exchange, it shouldn't a problem, but a vast majority of the users who get this message will probably be brand new to Stack Exchange, and I'd be worried ...


10

When you go to "Add login" from your logins, you can always enter the OpenID provider's URL in the text box provided in the "More login options". For Stack Exchange the URL is openid.stackexchange.com.


9

You can change your OpenID. Just go to your profile -> click my logins -> click add more logins.... You can also remove your old login (i.e. YahooID).


9

It seems status-completed, answer from Geoff Dalgas: The GitHub PR was finally approved and merged: https://stackoverflow.blog/2019/11/11/announcing-support-for-github-authentication-in-stack-overflow/


8

We probably should stop referring to "OpenID" anything altogether since the term tends to just cause varying amounts of confusion among our users. In the meantime, we don't make any distinction between actual OpenID providers and everything else because the distinction is largely meaningless. Being technically correct about each specific protocol doesn't ...


8

Google are deprecating their support for OpenId in favor of OAuth 2.0. As part of that, they no longer accept new domain names into their OpenId provider - that's why a beta site, which has a new domain name doesn't work with Google OpenId. This is a recent development, which caught us by surprise, while trying to launch a new beta site. We are still ...


8

There's a loophole here: if you still have access to the email address associated with your Facebook account, you can register for a Stack Exchange OpenId using the same email and log into your existing Stack Exchange account using that. We trust Facebook not to tell us you use an email address that isn't your own, so all you have to do is demonstrate ...


8

A simple fix would be make all the metas subdomains of this site. workplace.meta.stackexchange.com It still messes with the child cookies, but you shouldn't be giving children that many cookies anyway, and you already work around this issue in so many other places for login that it probably isn't that painful. Then you just need another wildcard ...


8

Oded's comment covers it entirely: If you request a self delete, you will have 24 hours to reverse the decision (prominent link on your profile page) - it will not be deleted immediately. That should be enough to avoid the issue you seem to be paranoid about. Though - the real answer is - log out every time if you are really worried about such a thing - ...


8

If I go to your network profile starting from your account here on Meta.SE, I see your SO account -- among several others. If I go to your SO account from there, though, I see what you see -- an SO account with no other accounts showing. If I go from there to your network profile, I reach a different network profile that shows no accounts. (Look at the ...


7

I can't reproduce anything about your redirect issue. The URL does get redirected, and it's supposed to get redirected, but I do not experience any errors with loading the chat page. As far as adding a video to your profile: no you can't do that, and they will never allow you to do that. If you want, post a link to the video. But they will never support ...


7

You're confused how logging out actually works when you've authenticated with an OpenID provider. Logging out on our site just clears your session on our site. You still need to go to the OpenID provider and either log out there or remove Stack's access to the account. If you use a Stack Exchange OpenID for login, you need to go to http://openid....


6

This thread is way too old. But, now we can add more accounts. Its quite visible Got to your profile. Click on "Edit Profile & Settings" tab/option. That will be one of the 3 options just below the logo Click on "My Logins" of section "SITE SETTINGS" on left hand side menu You can add/remove logins there I was searching of the same and came across ...


Only top voted, non community-wiki answers of a minimum length are eligible