- cross-posted to:
- programmer_humor@programming.dev
- cross-posted to:
- programmer_humor@programming.dev
I’ve seen an annoying trend of places that make you enter an email first and then you press a button and then the a password field appears, and then you have to press another button to get to 2FA with a third button. Because two weren’t bad enough, I guess.
I just had a log in require email, then the password field vanished, it requested my 2fa, then the password field returned.
How about not needing an account for things that don’t need accounts?
I’ve just bought a Lego set for my nephew’s Christmas present and I couldn’t just check out with my credit card. No. I had to create a Lego account and join some sort of community thing with nickname, personal page and reward points systems and constant email spam. And of course two days after that I get informed that they were hacked. I can’t wait for the damn set to be delivered already so I can delete that account.
Your forgetting in between each step where it asks you which 4 of your orgs SSO accounts you want to use.
Daily.driver@yourcompany.com
Elevated.account@yourcompany.com
ThatOneWeirdAccount@yourcompany.onmicrosft.com
TheOtherAccoutYouForgotWhatItWasFor@yourcompanysolddomain.comShouldn’t we reboot the internet and do it right from scratch, without compatibility to some 1980’s limitations and without executing foreign turing-complete code?
There are several such projects, nobody cares about them.
Dude, HTTP basic auth has existed since the dawn of the internet (or nearly so) and it’s far superior to HTML forms…
Sending a password as plaintext for every request is not superior to what we have now.
Sorry, how is an HTML form any less plaintext than HTTP basic auth?
If you put them over TLS, they are equally secure.
Edit: unless you meant passkeys, in which case I would agree with you.
A bunch of things add effort but also make sense. 2FA, etc… Fine. But why the fuck do I need to look so hard to find a login button now? Don’t you want me to login?
Looking at you Mailbox.org. Go to main page, open side menu and look half way down this. No login button anywhere anywhere on the main page? WTF? Who decides these things? The login button used to be right there at the top and someone made the decision to move it.
Passkeys aren’t actually bad, they just make the “remember my password” flow slightly easier and more secure.
Not inherently, but don’t give MORE companies your face and/or fingerprint, as is strongly recommended for passkeys.
Why would more companies my face for passkeys? Is the unlock not local?
I’m not too opposed to passkeys, but I don’t like being prompted to make one every time I log in somewhere
Especially when you already have one, but the option to use it does not appear on the login page.




