|
|
There's some intrinsic beauty to you're plan.
I don't know what it is but I know it's there.
| Ravings en masse^ |
|---|
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "If you are searching for perfection in others, then you seek disappointment. If you are seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
It's genius madness?! 
|
|
|
|
|
We decided at work today that an ideal password is "case-insensitive".
If you l33t it a bit, it will meet any stupid requirements.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
I vote for "Case-Sensitive". It's like "case-insensitive", but all the cool kids are using it.
Jeremy Falcon
|
|
|
|
|
I don't mix with the cool kids; they're just followers.
But you make a good point, so I'll go with "case-desensitised".
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
I always thought of people making up password rules as insensitive in any case 
GOTOs are a bit like wire coat hangers: they tend to breed in the darkness, such that where there once were few, eventually there are many, and the program's architecture collapses beneath them. (Fran Poretto)
|
|
|
|
|
|
This is one of the many reasons I wrote the article :
Destroy All Passwords: Never Memorize A Password Again[^]
Why not draw your password?
I agree with you about never remembering the password again and just requesting a new one each time.
The most secure password is known by no one.
|
|
|
|
|
|
This is lame. It's much more fun if they add rules like no more than three consecutive letters from your name (and fail to implement it correctly, because two consecutive letters already led to rejection of the password) and require you to change the password at least two times a month. People with names like Max Pax have little problems, but those with longer names and more common combinations practically could not come up with anything they could remember.
The language is JavaScript. that of Mordor, which I will not utter here
This is Javascript. If you put big wheels and a racing stripe on a golf cart, it's still a f***ing golf cart.
"I don't know, extraterrestrial?"
"You mean like from space?"
"No, from Canada."
If software development were a circus, we would all be the clowns.
|
|
|
|
|
Mister Mxyzptlk is hosed then
|
|
|
|
|
Super Lloyd wrote: On a site I am really interested in! (Xamarin forums)
Curious - are you using XForms or for (like me) using C# to build for Android/iOS only?
/ravi
|
|
|
|
|
yes, I have been using Xamarin Form for a while now! 
it's great!
|
|
|
|
|
Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a hieroglyph, and the blood of a virgin.
|
|
|
|
|
I like the haiku requirement! 
|
|
|
|
|
Another Microsoft failure on creating a simple form!Lol I laughed a lot with your post.
|
|
|
|
|
I always had the idea that the best way to authenticate a user is to rely on their mailbox.
1) User enters email address and clicks the Login button
2) Website sends email to that account with one-time link
3) User clicks one-time link and that authenticates him into the site
Thoughts?
|
|
|
|
|
It ain't to bad..
Particularly nowadays where one can read personal email on their phone easily!
|
|
|
|
|
Email is a really bad way to provide authentication. There is no standard method for authentication in email clients and email has no guarantees of confidentiality or data integrity in transit.
It's used at the moment for password recovery but it's far from ideal.
OpenID and OAuth are worth looking into. OpenID for authentication and OAuth for authorisation.
|
|
|
|
|
Yea thats the right way of doing it. This was more along the lines of something that only needs to be `as-secure-as` your email account. Perhaps the website is a serverless architecture and it uses your email address as your username and for communications, but beyond that it careth not.
Like I said, it was an idea but I haven't found a use-case for it just yet.
@dthompsonza
|
|
|
|
|
And the password to my email account is 'password' right?
Email is not secure though. I think pretty much anyone can read emails flying around the Internet, and anyone I know with imap or pop access don't use ssl as default, which is crazy.
|
|
|
|
|
Yeah, no access to email. No log on. Its no good.
|
|
|
|
|
In a recent ground-up rebuild of an application, I had a related argument with the project lead/client. I tried insisting that we should include no forced rules, but instead provide a strength meter based on the zxcvbn library.
My argument: a users password is a users password and who are we to define what is a "correct" password? Instead, we should warn against perceived password strength and accept what the user provides.
Final decision? A password must be at least 7 characters long and contain at least one letter and one number. *sigh* "pass123" is considered a "very strong" password. 
|
|
|
|
|
Yeah, I know about that, I don't blame the developers!
Although.. this is Xamarin[^] we are talking about in this case! I think I should blame the developers here! 
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
