3 ms·

Very few companies that use technology are technology companies. Is there no open-source standard for authentication and user-data management? Do companies rea

Very few companies that use technology are technology companies. Is there no open-source standard for authentication and user-data management? Do companies really need to roll their own each time?

mgkimsal 9y ago
it doesn't matter if standards exist. the "right way" to do stuff is "confusing" and "hard to use" for people who are not technology people. "What? I have to check my email for a password reset link? That's confusing?! Our users will not be able to use that! My temporary password is xpJ38@#K1o1n$5@wlo%!pq? This is horrible? My cousin does UX and says this lowers our SEO! Just have it email their password to them! It'll confuse people!" Amalgamation of various reactions I've heard over the years when implementing standard process for password creation/resets.
- JBiserkov 9y ago
  You are correct in this universe. But in the universe the grand-parent imagines, none of this is confusing, because EACH AND EVERY WEBSITE on the planet does this, so users (and even managers) have seen this many times already. Jakob's Law of the Internet User Experience (2000): Users spend most of their time on other sites[0]. [Granted, this may not apply to Google/Facebook, it's from an earlier, more civilized, I mean decentralized age.] Also, the standard would use 7-word long pass-phrases [1] which are much more readable, memorable and secure than the abomination above. [0] https://www.nngroup.com/articles/end-of-web-design/ https://www.nngroup.com/articles/end-of-web-design/ [1] https://en.wikipedia.org/wiki/Diceware https://en.wikipedia.org/wiki/Diceware
jacquesm 9y ago
> Very few companies that use technology are technology companies. No, all companies that use technology are technology companies, they just fail to realize this and do not act accordingly.
- theandrewbailey 9y ago
  That doesn't make sense. That's like calling my neighborhood pizzeria a car company because they use cars to deliver pizzas. They are a phone company too, because that's how people place orders.

Very few companies that use technology are technology companies. Is there no open-source standard for authentication and user-data management? Do companies really need to roll their own each time?

mgkimsal 9y ago

it doesn't matter if standards exist. the "right way" to do stuff is "confusing" and "hard to use" for people who are not technology people. "What? I have to check my email for a password reset link? That's confusing?! Our users will not be able to use that! My temporary password is xpJ38@#K1o1n$5@wlo%!pq? This is horrible? My cousin does UX and says this lowers our SEO! Just have it email their password to them! It'll confuse people!" Amalgamation of various reactions I've heard over the years when implementing standard process for password creation/resets.

JBiserkov 9y ago
You are correct in this universe. But in the universe the grand-parent imagines, none of this is confusing, because EACH AND EVERY WEBSITE on the planet does this, so users (and even managers) have seen this many times already. Jakob's Law of the Internet User Experience (2000): Users spend most of their time on other sites[0]. [Granted, this may not apply to Google/Facebook, it's from an earlier, more civilized, I mean decentralized age.] Also, the standard would use 7-word long pass-phrases [1] which are much more readable, memorable and secure than the abomination above. [0] https://www.nngroup.com/articles/end-of-web-design/ https://www.nngroup.com/articles/end-of-web-design/ [1] https://en.wikipedia.org/wiki/Diceware https://en.wikipedia.org/wiki/Diceware

jacquesm 9y ago

> Very few companies that use technology are technology companies. No, all companies that use technology are technology companies, they just fail to realize this and do not act accordingly.

theandrewbailey 9y ago
That doesn't make sense. That's like calling my neighborhood pizzeria a car company because they use cars to deliver pizzas. They are a phone company too, because that's how people place orders.