Joе Pеtviаshvili ([info]krotty) wrote,

open id from livejournal is not safe

If you are logged in to livejournal, that information can be shared with third parties without your consent through OpenID. Right now livejournal.ru and kommersant.ru are doing it.

Have not found a way to disable it, they are using http://www.livejournal.com/openid/server.bml?openid.mode=checkid_immediate and livejournal is giving out my auth info without asking...

Update: http://livejournal.com/openid/options.bml has a list of web sites you have approved. kommersant.ru and livejournal.ru are not on the list for me. The whole thing is a side effect of SUP.com / LiveJournal deal, where the rights to service russian part of livejournal were given to a russian company. If you have livejournal account, sign into it and go to livejournal.ru and you will see your name in the top right corner. kommersant.ru has a deal with SUP / livejournal.ru to render comments.

That means that even when you are not in russia you can be tracked by a moscow based company as you visit sites they have a deal with.

  • Post a new comment

    Error

    Comments allowed for friends only

    Anonymous comments are disabled in this journal

    Your reply will be screened

  • 0 comments
Create an Account
Forgot your login or password?
Facebook Twitter More login options
English • Español • Deutsch • Русский…