3 ms·
Ah get it. They don't want the password to login on github to be the same as the one you store on a text file. Makes sense. But it is still Baby-sitting
by polote 5y ago
Ah get it. They don't want the password to login on github to be the same as the one you store on a text file. Makes sense. But it is still Baby-sitting
- nerdponx 5y agoIf this is babysitting, I never want to grow up.
- eropple 5y agoWhat you describe as "baby-sitting", I would call "encouraging users to fall into the pit of success." Many, many GitHub users are not professional software developers, and many more than that are not security-minded users at all. Small incremental improvements like this are a kind of defense in depth, and it is valuable.
- tclancy 5y agoAnd we have fifty years of software development history to prove we need this kind of babysitting. It’s a pain one time and then you realize it wasn’t hard to do and start doing a better practice out of habit.
- kdmccormick 5y agoEh, I think everyone stands to benefit when a service increases their security standards in a reasonable way. Fewer account recovery support requests for them, fewer footguns for inexperienced users of theirs. Do you consider password length requirements baby-sitting?