Ask Technica Umratica: Uber and Google

[Sid Nuncius]

I've just had an unsettling experience. I tried to install the Uber app
on my Android phone. I downloaded it OK from Playstore but during the
setup I found that I couldn't enter the 4-digit codes they sent me by
text, so I used the web sign-up option.

I chose a password - and found that the app still didn't seem to work
properly and, more worryingly, my Google password had changed to the one
I'd just used for Uber. Er...what?

I've uninstalled the Uber app and I've changed my Google password again,
using my laptop and Google account, *not* my phone. All seems to be
working normally again and I've had the expected email alerts from
Google about the changes, which I'm pretty confident are genuine.

My questions: Is this normal? How can setting an Uber password affect
my Google account? And do I need to worry that anything has been hacked?

Any advice/reassurance gratefully received.

[the Omrud]

I've just had an unsettling experience.  I tried to install the Uber app
on my Android phone.  I downloaded it OK from Playstore but during the
setup I found that I couldn't enter the 4-digit codes they sent me by
text, so I used the web sign-up option.
I chose a password - and found that the app still didn't seem to work
properly and, more worryingly, my Google password had changed to the one
I'd just used for Uber.  Er...what?
I've uninstalled the Uber app and I've changed my Google password again,
using my laptop and Google account, *not* my phone.  All seems to be
working normally again and I've had the expected email alerts from
Google about the changes, which I'm pretty confident are genuine.
My questions: Is this normal?  How can setting an Uber password affect
my Google account?  And do I need to worry that anything has been hacked?
Any advice/reassurance gratefully received.

Like many third party tools, Uber accept logins from Facebook (and
Google). My guess is that you accidentally chose to log in with your
Facebook ID and then accidentally changed your Facebook password, which
was now linked to Uber.

Facebook don't share your password with third parties - there's a
complex series of interactions involving things called "tokens" which
pass user names and other details which the third party does actually
need, but never the actual password (which indeed is not accessible to
Facebook themselves because it's been encrypted in a manner which is not
reversible). So I wouldn't worry about it.

However, for all readers, it is generally a BAD IDEA to use your
Facebook account to log in to a third party tool. Not for security
reasons - it's perfectly secure - but because Facebook will now garner
data from that other app and merge it with your already extensive
Facebook data.

I could go on, but I'm retired.

[Sid Nuncius]

Post by the Omrud

I've just had an unsettling experience.  I tried to install the Uber
app on my Android phone.  I downloaded it OK from Playstore but during
the setup I found that I couldn't enter the 4-digit codes they sent me
by text, so I used the web sign-up option.
I chose a password - and found that the app still didn't seem to work
properly and, more worryingly, my Google password had changed to the
one I'd just used for Uber.  Er...what?
I've uninstalled the Uber app and I've changed my Google password
again, using my laptop and Google account, *not* my phone.  All seems
to be working normally again and I've had the expected email alerts
from Google about the changes, which I'm pretty confident are genuine.
My questions: Is this normal?  How can setting an Uber password affect
my Google account?  And do I need to worry that anything has been hacked?
Any advice/reassurance gratefully received.

Like many third party tools, Uber accept logins from Facebook (and
Google).  My guess is that you accidentally chose to log in with your
Facebook ID and then accidentally changed your Facebook password, which
was now linked to Uber.
Facebook don't share your password with third parties - there's a
complex series of interactions involving things called "tokens" which
pass user names and other details which the third party does actually
need, but never the actual password (which indeed is not accessible to
Facebook themselves because it's been encrypted in a manner which is not
reversible).  So I wouldn't worry about it.
However, for all readers, it is generally  a BAD IDEA to use your
Facebook account to log in to a third party tool.  Not for security
reasons - it's perfectly secure - but because Facebook will now garner
data from that other app and merge it with your already extensive
Facebook data.
I could go on, but I'm retired.

Thanks, David. It was Google (I don't have a FB account) but I think
that must be what happened. I never knowingly use Google to log into
anything.

It's boodly annoying, but I'm comforted that it's unlikely to be
anything very alarming.

[Jane Vernon]

Post by the Omrud

I've just had an unsettling experience.  I tried to install the Uber
app on my Android phone.  I downloaded it OK from Playstore but
during the setup I found that I couldn't enter the 4-digit codes they
sent me by text, so I used the web sign-up option.
I chose a password - and found that the app still didn't seem to work
properly and, more worryingly, my Google password had changed to the
one I'd just used for Uber.  Er...what?
I've uninstalled the Uber app and I've changed my Google password
again, using my laptop and Google account, *not* my phone.  All seems
to be working normally again and I've had the expected email alerts
from Google about the changes, which I'm pretty confident are genuine.
My questions: Is this normal?  How can setting an Uber password
affect my Google account?  And do I need to worry that anything has
been hacked?
Any advice/reassurance gratefully received.

Like many third party tools, Uber accept logins from Facebook (and
Google).  My guess is that you accidentally chose to log in with your
Facebook ID and then accidentally changed your Facebook password,
which was now linked to Uber.
Facebook don't share your password with third parties - there's a
complex series of interactions involving things called "tokens" which
pass user names and other details which the third party does actually
need, but never the actual password (which indeed is not accessible to
Facebook themselves because it's been encrypted in a manner which is
not reversible).  So I wouldn't worry about it.
However, for all readers, it is generally  a BAD IDEA to use your
Facebook account to log in to a third party tool.  Not for security
reasons - it's perfectly secure - but because Facebook will now garner
data from that other app and merge it with your already extensive
Facebook data.
I could go on, but I'm retired.

Thanks, David.  It was Google (I don't have a FB account) but I think
that must be what happened.  I never knowingly use Google to log into
anything.
It's boodly annoying, but I'm comforted that it's unlikely to be
anything very alarming.

It's more than annoying. I've had so many Microsoft or Google passwords
because one thing or another insists on using one of them as a way in
and I get in a tangle.
I'm pretty confident with my Microsoft password now, but Google is still
a mystery. I need it for my Blogger account, I know, but can't remember
what else.

[Sam Plusnet]

Post by the Omrud

I've just had an unsettling experience.  I tried to install the Uber
app on my Android phone.  I downloaded it OK from Playstore but
during the setup I found that I couldn't enter the 4-digit codes
they sent me by text, so I used the web sign-up option.
I chose a password - and found that the app still didn't seem to
work properly and, more worryingly, my Google password had changed
to the one I'd just used for Uber.  Er...what?
I've uninstalled the Uber app and I've changed my Google password
again, using my laptop and Google account, *not* my phone.  All
seems to be working normally again and I've had the expected email
alerts from Google about the changes, which I'm pretty confident are
genuine.
My questions: Is this normal?  How can setting an Uber password
affect my Google account?  And do I need to worry that anything has
been hacked?
Any advice/reassurance gratefully received.

Like many third party tools, Uber accept logins from Facebook (and
Google).  My guess is that you accidentally chose to log in with your
Facebook ID and then accidentally changed your Facebook password,
which was now linked to Uber.
Facebook don't share your password with third parties - there's a
complex series of interactions involving things called "tokens" which
pass user names and other details which the third party does actually
need, but never the actual password (which indeed is not accessible
to Facebook themselves because it's been encrypted in a manner which
is not reversible).  So I wouldn't worry about it.
However, for all readers, it is generally  a BAD IDEA to use your
Facebook account to log in to a third party tool.  Not for security
reasons - it's perfectly secure - but because Facebook will now
garner data from that other app and merge it with your already
extensive Facebook data.
I could go on, but I'm retired.

Thanks, David.  It was Google (I don't have a FB account) but I think
that must be what happened.  I never knowingly use Google to log into
anything.
It's boodly annoying, but I'm comforted that it's unlikely to be
anything very alarming.

It's more than annoying.  I've had so many Microsoft or Google passwords
because one thing or another insists on using one of them as a way in
and I get in a tangle.
I'm pretty confident with my Microsoft password now, but Google is still
a mystery.  I need it for my Blogger account, I know, but can't remember
what else.

I have no idea if I have a Microsoft password - although this machine
keeps telling me that there is some problem with my "Account" & this is
probably something to do with my password.

Account?

[Jenny M Benson]

Post by Sam Plusnet
I have no idea if I have a Microsoft password - although this machine
keeps telling me that there is some problem with my "Account" & this is
probably something to do with my password.
Account?

Sounds like the same problem my sis was (is?) having. She hasn't found
out what it's all about either.

[steveski]

Post by Jenny M Benson

Post by Sam Plusnet
I have no idea if I have a Microsoft password - although this machine
keeps telling me that there is some problem with my "Account" & this is
probably something to do with my password.
Account?

Sounds like the same problem my sis was (is?) having. She hasn't found
out what it's all about either.

I *think* that you have to log in to your W10 (or other M$ account)to
keep it active. Or, perhaps, this only applies to a Google account - I
haven't got it sorted out in my mind yet but I'm not having any probs. atm
Hope this gives you some kind of pointer.

[Kosmo]

Post by steveski
I *think* that you have to log in to your W10 (or other M$

account)to

Post by steveski
keep it active. Or, perhaps, this only applies to a Google account - I

Definitely W10. Sign into Windows & all will be well.

[Jenny M Benson]

Post by steveski

Post by steveski
I *think* that you have to log in to your W10 (or other M$

account)to

Post by steveski
keep it active. Or, perhaps, this only applies to a Google account

- I
Definitely W10.  Sign into Windows & all will be well.

Is that different to the sign-in when one fires up the computer? My sis
signs in every time she uses her lapdog. I remember that there is some
message about going to ... er ...Umbrella to fix the problem but we
couldn't find any mention of Umbrella in Settings.

[krw]

Post by steveski

Post by steveski
I *think* that you have to log in to your W10 (or other M$

account)to

Post by steveski
keep it active. Or, perhaps, this only applies to a Google account

- I
Definitely W10.  Sign into Windows & all will be well.

Is that different to the sign-in when one fires up the computer?  My sis
signs in every time she uses her lapdog.  I remember that there is some
message about going to ... er ...Umbrella to fix the problem but we
couldn't find any mention of Umbrella in Settings.

If you look under Windows Setting and accounts you will almost certainly
find a local account and a windows account. Under my Administrator
account there is a link to "Sign in with a Microsoft account instead"

[Mike Ruddock]

Post by krw

Post by steveski

Post by steveski
I *think* that you have to log in to your W10 (or other M$

account)to

Post by steveski
keep it active. Or, perhaps, this only applies to a Google account

- I
Definitely W10.  Sign into Windows & all will be well.

Is that different to the sign-in when one fires up the computer?  My
sis signs in every time she uses her lapdog.  I remember that there is
some message about going to ... er ...Umbrella to fix the problem but
we couldn't find any mention of Umbrella in Settings.

If you look under Windows Setting and accounts you will almost certainly
find a local account and a windows account.  Under my Administrator
account there is a link to "Sign in with a Microsoft account instead"

. . . and what benefits/disadvantages are there in complying?

Mike Ruddock

[Mike]

Post by Mike Ruddock

Post by krw

Post by steveski

Post by steveski
I *think* that you have to log in to your W10 (or other M$

account)to

Post by steveski
keep it active. Or, perhaps, this only applies to a Google account

- I
Definitely W10.  Sign into Windows & all will be well.

Is that different to the sign-in when one fires up the computer?  My
sis signs in every time she uses her lapdog.  I remember that there is
some message about going to ... er ...Umbrella to fix the problem but
we couldn't find any mention of Umbrella in Settings.

If you look under Windows Setting and accounts you will almost certainly
find a local account and a windows account.  Under my Administrator
account there is a link to "Sign in with a Microsoft account instead"

. . . and what benefits/disadvantages are there in complying?
Mike Ruddock

Bill Gates comes to yours for supper?

[krw]

Post by krw

Post by steveski

Post by steveski
I *think* that you have to log in to your W10 (or other M$

account)to

Post by steveski
keep it active. Or, perhaps, this only applies to a Google account

- I
Definitely W10.  Sign into Windows & all will be well.

Is that different to the sign-in when one fires up the computer?  My
sis signs in every time she uses her lapdog.  I remember that there
is some message about going to ... er ...Umbrella to fix the problem
but we couldn't find any mention of Umbrella in Settings.

If you look under Windows Setting and accounts you will almost
certainly find a local account and a windows account.  Under my
Administrator account there is a link to "Sign in with a Microsoft
account instead"

.. . . and what benefits/disadvantages are there in complying?
Mike Ruddock

I get the odd reminder to sign in with the Microsoft account. I do so,
then sign out and the nagging stops.

I suspect it tells Microsoft that the hardware on which the Windows
software resides is unaltered and that I am therefore legal - and it
probably tells them a lot of other things - but life is too short to
worry about what they tell GCHQ ... <no signal>

[Jenny M Benson]

Post by krw
If you look under Windows Setting and accounts you will almost certainly
find a local account and a windows account.  Under my Administrator
account there is a link to "Sign in with a Microsoft account instead"

Ah! My system seems to be the other way round. My account as
Administrator is a MS account and i have a link to "Sign in with a local
account instead."

Sis is no longer getting the error message so we can't remember now what
it was saying.

[Sam Plusnet]

Post by steveski

Post by steveski
I *think* that you have to log in to your W10 (or other M$

account)to

Post by steveski
keep it active. Or, perhaps, this only applies to a Google account

- I
Definitely W10.  Sign into Windows & all will be well.

I "sign in" to my user "local account" each time I fire up this machine,
but 'this is talk of a "Microsoft account".

I take this to mean that MS would like to move into a closer, more
sharing relationship with my wallet.

[Kosmo]

Post by Sam Plusnet
I take this to mean that MS would like to move into a closer, more

If you have W10 you have a high probability of having a Microsoft
account which you sign in to from time to time.

[Nick Odell]

Post by Kosmo

Post by Sam Plusnet
I take this to mean that MS would like to move into a closer, more

If you have W10 you have a high probability of having a Microsoft
account which you sign in to from time to time.

My Windows 8.1[1] insists I use the same password that I use for Hotmail
and when I changed all my passwords in a flurry of security concerns,
Windows insisted I change my computer sign-in password too. I thought we
were supposed to use a different password for everything, these days?

Nick
[1]C'mon now: you didn't expect me to be bang up to date, did you?

[Kate B]

Post by Nick Odell

Post by Kosmo

Post by Sam Plusnet
I take this to mean that MS would like to move into a closer, more

If you have W10 you have a high probability of having a Microsoft
account which you sign in to from time to time.

My Windows 8.1[1] insists I use the same password that I use for Hotmail
and when I changed all my passwords in a flurry of security concerns,
Windows insisted I change my computer sign-in password too. I thought we
were supposed to use a different password for everything, these days?
Nick
[1]C'mon now: you didn't expect me to be bang up to date, did you?

Still on Win7 here and hanging on for grim life.

[Mike]

Post by Kate B

Post by Nick Odell

Post by Kosmo

Post by Sam Plusnet
I take this to mean that MS would like to move into a closer, more

If you have W10 you have a high probability of having a Microsoft
account which you sign in to from time to time.

My Windows 8.1[1] insists I use the same password that I use for Hotmail
and when I changed all my passwords in a flurry of security concerns,
Windows insisted I change my computer sign-in password too. I thought we
were supposed to use a different password for everything, these days?
Nick
[1]C'mon now: you didn't expect me to be bang up to date, did you?

Still on Win7 here and hanging on for grim life.

I have Win 7 on one and XP on another.

[Fenny]

Post by Kosmo

Post by Sam Plusnet
I take this to mean that MS would like to move into a closer, more

If you have W10 you have a high probability of having a Microsoft
account which you sign in to from time to time.

Nope. I refused!

[Sam Plusnet]

Post by Kosmo

Post by Sam Plusnet
I take this to mean that MS would like to move into a closer, more

If you have W10 you have a high probability of having a Microsoft
account which you sign in to from time to time.

Not unless this happens whilst sleep-surfing.