4 ms·
Only tangentially related: The other day I was trying to log on to a service I rarely use, and couldn't remember my password. So I started chugging through all
by TheEzEzz 16y ago
Only tangentially related:
The other day I was trying to log on to a service I rarely use, and couldn't remember my password. So I started chugging through all the different passwords I use. Then I realized what a horrible idea that is. If the service wasn't benign (or if they were using plain text), I could have just let out ALL of my passwords.
Really, really stupid, but I wonder how many people do this, and how effective it could be as a way to collect passwords.
- parenthesis 16y agoA similar case is typing in your email password by mistake when (trying to) log in to a site where your email address is your username.
- TheEzEzz 16y agoGood point. I've been thinking about lazy registration a lot. I'm considering implementing a service where the user will be prompted at some point to enter their email to be remembered, but making a password optional. The service would be worthless to hackers, but I suppose griefers could still have some fun.
- mason55 16y agoInstapaper does this; you only have to set up a password if you want.
- simonw 16y agoI believe that's a classic phishing trick. A really smart phishing site will tell you you got your password wrong a couple of times to harvest your password variants, then on the third attempt redirect you to the real site's login page so you can login there, hopefully unaware that you had ever been phishing.
- js4all 16y agoThis is why I prefer sites using openid or oauth.