@troyhunt had something good in mind. But it's worthless and worse, it might put a high cognitive burden on the user! (see @marcan42 impl.)pic.twitter.com/LgAIULN2CI
-
-
What does?
1 reply 0 retweets 0 likes -
Maximilian Golla Retweeted Hector Martin
Being incapable to implement proper rate-limiting (true, it's hard) and instead blacklisting 320m pws. Horrible UX!https://twitter.com/marcan42/status/893499932794994691 …
Maximilian Golla added,
2 replies 1 retweet 1 like -
I don't think it's horrible UX if you do the whole thing client-side like zxcvbn pwd meter. But it's highly impractical with millions pwd.
1 reply 0 retweets 1 like -
Everyone saying the 320M blacklist is a "horrible UX" hasn't actually tried punching in random passwords into
@troyhunt's site.1 reply 0 retweets 0 likes -
Seriously, the chances of hitting a blacklisted password with anything better than <easy word/name> + <number> are slim to none.
1 reply 0 retweets 1 like -
Isn't there an emoji that bangs the head against the wall?
http://www.blaseur.com/papers/chi16-pwperceptions.pdf …
http://www.blaseur.com/papers/soups15-paper-ur.pdf …
https://www.internetsociety.org/sites/default/files/06_2_1.pdf …pic.twitter.com/8Wfrd5RY2k
1 reply 0 retweets 0 likes -
Of course it's a common pattern, and it's also a completely shitty pattern. The point is all you have to do is *one* thing beyond that.
2 replies 0 retweets 0 likes -
user: "No I won't do one thing beyond that I simply will buy this item somewhere else instead, I don't care about your password bullshit"
2 replies 0 retweets 0 likes -
Isn't it great when you're the only place the user can buy a given "item" and also you sell out in ~5 seconds three times a year? ;)
1 reply 0 retweets 2 likes
But hey, as I said to other people, keep making assumptions about the behavior of my userbase, which you clearly know better than I do.
8:59 AM - 7 Aug 2017
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.