4 ms·
Force every single user to change their password right now. When a new password is entered, check it against common passwords, and reject bad inputs as needed.
by sigfubar 8y ago
Force every single user to change their password right now. When a new password is entered, check it against common passwords, and reject bad inputs as needed.
- ElijahLynn 8y agoThis would cause friction and they would lose users, which would piss off investors. This isn't a technical issue.
- sigfubar 8y agoConsidering the degree to which most Twitter users are trash, I wouldn't mind losing a few of those. The rest will understand the need for security.
- penagwin 8y agoYeah but you're not an investor. Twitters been struggling to make money for a long time, do you think the investors would be happy to see a decline in active users because of "security" - a concept they barely understand?
- sigfubar 8y agoI’m not an investor in Twitter because I don’t invest in companies that are unable to assume an appropriate security posture. The same reasoning leads one to conclude that dilettantes who do hold Twitter stock deserve to get burned when poor security practices come home to roost.