5 ms·

As opposed to "Oh, they want a password? I guess I'll use the same one I use for every other website." I agree that the business makes the decision, growth is

As opposed to "Oh, they want a password? I guess I'll use the same one I use for every other website." I agree that the business makes the decision, growth is the top priority and friction reduces growth, but in reality this is how most of the world already works. If you rent a hotel room you don't get to provide your own key and if you lose their key then you must prove who you are to get another one issued. In the end there must be some compromise between growth and responsibility. If a company cannot grow responsibly then we end up with Facebook all over again.

salvar 8y ago
Your hotel example is pretty absurd, because there's no friction involved in carrying around a hotel room key. There is significant friction involved in memorizing a long password. So no, it's not "how most of the world already works".
- ilovetux 8y ago
  I will admit that it's not quite equivalent, but there was a learning curve that happened when hotels switched from metallic keys to magnetic keycards. I don't think that it's absurd. I guess a more direct example would be an employer trusting you with the combination of a safe. You would need to remember the combination which presumably would be changed periodically. The point I think I'm trying to make is that it's rare for a business to leave the responsibility on the consumer to secure the property of that business whether it's access to a server, a hotel room, or a safe.
  - salvar 8y ago
    If it's a company safe? Well of course that's the employer's decision. A better example would be a safe deposit box or storage unit with a combination. Where you are accessing your account so to speak. There you can pick the combination yourself in most cases.
rocqua 8y ago
Password re-use is bad, true. But it is frictionless for the user. The entire point of the article is that trading friction for security isn't going to happen in most businesses.

salvar 8y ago

Your hotel example is pretty absurd, because there's no friction involved in carrying around a hotel room key. There is significant friction involved in memorizing a long password. So no, it's not "how most of the world already works".

ilovetux 8y ago
I will admit that it's not quite equivalent, but there was a learning curve that happened when hotels switched from metallic keys to magnetic keycards. I don't think that it's absurd. I guess a more direct example would be an employer trusting you with the combination of a safe. You would need to remember the combination which presumably would be changed periodically. The point I think I'm trying to make is that it's rare for a business to leave the responsibility on the consumer to secure the property of that business whether it's access to a server, a hotel room, or a safe.
- salvar 8y ago
  If it's a company safe? Well of course that's the employer's decision. A better example would be a safe deposit box or storage unit with a combination. Where you are accessing your account so to speak. There you can pick the combination yourself in most cases.

rocqua 8y ago

Password re-use is bad, true. But it is frictionless for the user. The entire point of the article is that trading friction for security isn't going to happen in most businesses.