This is confusing authentication and authorization. Is this phone legitimately t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

yuliyp on July 14, 2012 | parent | context | favorite | on: Logins are Dead, and Mobile Killed Them

This is confusing authentication and authorization. Is this phone legitimately tied to this Apple ID? Yes. Is the owner of the account authorized to make such a purchase? No.

A short appstore PIN could solve this much more easily.

radq on July 14, 2012 [–]

I'm not so sure having _yet another_ PIN for users to remember would be a good idea. And besides, a short PIN would be far easier to deduce by looking over a person's shoulder.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact