|
I host mail for one of my friends.
Apparently he has not have as good discipline as the rest of you in who should know his e-mail address, because suddenly he got mails from all kind of dubious "pink" sites. He being a long term married man was a bit embarrassed to say the least!
We ended up creating a new address for him. The old one is forwarded to my spam learning filter and then onwards to /dev/null.
My friend got a bit wiser after that.
|
|
|
|
|
Are all bots. Trust me, no human can remember this much username/password combination, unless they are using browser of other password remembering services to do so.
What I do is, I try to claim my own username, "afzaal-ahmad-zeeshan", any combination of the same. One of the possible combinations is always available so I use it. As for the password, I use just one password to rule it all. I remember, once I asked my girl to set a password for my account... God knows what that password was. 
Other than this, my personal preference is to consider Facebook, Google sign in. They are pretty much handy.
The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~
|
|
|
|
|
So...one password for everything?
That's horrible. Go to QA, and look at how many people are storing passwords in clear text - heck, look at the news - and think to yourself: how much do I trust every site I visit to secure my one and only password? Because if any one of them is vulnerable, that one-password-fits-all approach could come back to bite your ass, big time.
Just saying!
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
I agree with you in principle, but I pretty much do the same thing (using a couple of passwords across every site)..
Otherwise how do you remember every unique and ultra-strong password e.g. y[F9/fN.[y734hl ?
Ah, I see you have the machine that goes ping. This is my favorite. You see we lease it back from the company we sold it to and that way it comes under the monthly current budget and not the capital account.
modified 31-Aug-21 21:01pm.
|
|
|
|
|
I don't.
I use GUIDs (tweaked for each different sites stupid set of rules) and store them in a encrypted password manager I wrote. I remember one master password - which fits no other app or site - and it remembers the others for me. For "low security" sites like CP, I let Chrome handle the login - but for the bank, credit cards, and such like, nothing gets remembered.
Needless to say, the encrypted store and it's app is backed up extremely carefully! 
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
Is it an online app?
I'm just wondering because I use a number of different machines (including Linux and MacOS as well as Windows) - it'd be great to have one place to store everything (Apple offer to save your passwords into iCloud so it'll remember them on your iPad and iPhone as well but it doesn't work across other platforms).
To be fair Apple does suggest Guids for passwords when creating online accounts, then stores them in iCloud but that's not much use when I'm trying to log in from my work PC.
Ah, I see you have the machine that goes ping. This is my favorite. You see we lease it back from the company we sold it to and that way it comes under the monthly current budget and not the capital account.
modified 31-Aug-21 21:01pm.
|
|
|
|
|
Not at the moment, but I'm planning to move it to a client/server architecture (so it can work offline, when I need my WiFi password for example) and replicate changes via the server. Partly so I can add an Android version that shares the same data. The fun part of that is keeping the encryption together with a page-level replication but not compromising the security. Think I've got that all worked out though.
But it's finding the time ...
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
OriginalGriff wrote: But it's finding the time ...
We all know that feeling
Ah, I see you have the machine that goes ping. This is my favorite. You see we lease it back from the company we sold it to and that way it comes under the monthly current budget and not the capital account.
modified 31-Aug-21 21:01pm.
|
|
|
|
|
Like I said, there is a combination. I could've said I use a pass-sentence, permutation jumps in. But the sentence itself stays the same.
Quote: how much do I trust every site I visit to secure my one and only password?
That's where I prefer Facebook or Google login, keeping on pass-sentence in just a tight group of giants.
Nonetheless, you're right. 
The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~
|
|
|
|
|
Most times when a site insists on an email address, I go to Mailinator or TenMinuteMail and let them do their thang.
If I like the site, then it'll get the "real" address later.
Plus, you get sites (like Chuwi's) that don't accept hyphens in domain names: so I can't sign up with them with a real address anyway...
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
OriginalGriff wrote: that don't accept hyphens in domain names
Did you ever try to validate a mail address with a regex?
The language is JavaScript. that of Mordor, which I will not utter here
This is Javascript. If you put big wheels and a racing stripe on a golf cart, it's still a f***ing golf cart.
"I don't know, extraterrestrial?"
"You mean like from space?"
"No, from Canada."
If software development were a circus, we would all be the clowns.
|
|
|
|
|
No.
Since the rules on length and permitted characters is different for the local and domain part, I split on the '@' and then do separate checks.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
It's complicated, to say the least. It's very possible that a regex that can accurately validate every possible valid mail address does not exist.
The language is JavaScript. that of Mordor, which I will not utter here
This is Javascript. If you put big wheels and a racing stripe on a golf cart, it's still a f***ing golf cart.
"I don't know, extraterrestrial?"
"You mean like from space?"
"No, from Canada."
If software development were a circus, we would all be the clowns.
|
|
|
|
|
Agreed - I work on the principle that you are better off doing basic checks only, and sending a confirmation email to the address given.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
I just had a look at a discussion about that. One side insists that the validation is more important than frustrated users who can't enter their mail addresses, the other side pleads for tolerant validation and more error checking when the mail address is used.
The language is JavaScript. that of Mordor, which I will not utter here
This is Javascript. If you put big wheels and a racing stripe on a golf cart, it's still a f***ing golf cart.
"I don't know, extraterrestrial?"
"You mean like from space?"
"No, from Canada."
If software development were a circus, we would all be the clowns.
|
|
|
|
|
At least in theory an "@" is allowed in the local part of an email address. 
You just have to use it in a quoted string (which explicitly allows "any CHAR excepting <">,"\" & CR, and including white-space" see RFC822[^])
|
|
|
|
|
OriginalGriff wrote: TenMinuteMail
I wasn't aware of them - looks useful!
Java, Basic, who cares - it's all a bunch of tree-hugging hippy cr*p
|
|
|
|
|
I think facebook is the best platform for to make contact with real users. And I am trusting facebook profiles on the websites. For example if you want to buy a product on a website I read comments which writen by facebook users. Or hire a man for the job , taxi applications, etc.
|
|
|
|
|
If you were in Africa, where would you look for a lion?
The language is JavaScript. that of Mordor, which I will not utter here
This is Javascript. If you put big wheels and a racing stripe on a golf cart, it's still a f***ing golf cart.
"I don't know, extraterrestrial?"
"You mean like from space?"
"No, from Canada."
If software development were a circus, we would all be the clowns.
|
|
|
|
|
... for email / password I use my secondary mail address and a unique password.
Martin
|
|
|
|
|
Otherwise they get the spam address, an old hotmail account I have had for over 20 years, while the password is not quite that simple it is pretty damn close.
I have only had it hijacked once in all that time.
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
I have a question on whether to use 3rd party logon like facebook because the value of website is linked to its number of members. So if a user use 3rd party logon, they are not really the website member because the website do not have their info?
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
