3 ms·
> "The other fix would be to use an email address that can't be guessed from the blog address. In other words, the email address is the password." You'd still
by axod 16y ago
> "The other fix would be to use an email address that can't be guessed from the blog address. In other words, the email address is the password."
You'd still be sending your password in the clear, possibly through other peoples mail servers. Not great security.
- tman 16y agoThe perfect is the enemy of the good. There is a trade-off here between security and usability. 99% security is good enough for a lot of purposes and has its place.
- infinite8s 16y agoExcept that's more like 10% or 1% security.
- infinite8s 16y agoExcept that's more like 10% or even 1% security.
- tman 16y agoOh really? I don't think you know what you mean. In point of fact, I just sent myself a very important password in clear text. Hack me.
- axod 16y agoThe task for a spammer isn't to hack <USERS> account. It's to hack ANY account. Being able to hack any posterous account is going to be far far easier than trying to hack a particular account.