3 ms·
People reusing passwords and email adresses is a known problem and not rare at all. So deal with it, i.e. you need to make sure that your service can not be aff
by _Microft 7y ago
People reusing passwords and email adresses is a known problem and not rare at all. So deal with it, i.e. you need to make sure that your service can not be affected by a simple leak. Not doing so means putting the security of your users and their experience with your product into the hands of other people (everyone who knows the email and password combination of your user).
Ideally, being susceptible to a leaked password-email-combination should be considered gross negligence.
- dwild 7y ago> you need to make sure that your service can not be affected by a simple leak How can you use any service then if in your mind any service should be be able to not be affected by a leak? My username/password combo is everything I need to use my account fully. Should there be another factor to use my account? I should be forced to get set another factor to post on HN? This is just absurd. We just can't keep increasing road block to let people not learn how to use something. There will always be an idiot to outsmart you.