4 ms·
They _should_ save everything that is sent with this service. They'll have a pretty good dataset to determine common passwords, etc. Then, they could use the
by joejohnson 15y ago
They _should_ save everything that is sent with this service. They'll have a pretty good dataset to determine common passwords, etc. Then, they could use the data to help users pick better passwords. It's not an invasion of privacy if it's done anonymously, in aggregate, right!?
- artursapek 15y agoAgreed. Selling anonymous data (in this case to security companies, etc) is a great way for this kind of free service to pay the bills.
- mkopinsky 15y agoThey could even go freemium by giving an option to be excluded from aggregate data reporting.
- delano 15y agoYou guys raise an interesting case we hadn't thought about yet. Devil's advocate: how would that be better than the algorithmic approaches (weak, medium, strong indicators implemented in javascript etc).
- mkopinsky 15y agoI can't speak for the others, but let me make clear that I am being entirely facetious. Selling data of user-provided passwords in this kind of context (an app ostensibly used to provide security) is among the worst kinds of evil. Requiring, or even allowing, users to escape from this kind of evil by paying a ransom is unconscionable.
- joejohnson 15y agoOh my god, this whole thread is ridiculous. I need to say that I intended my original comment as a joke. I don't think it is ethical to misuse users' data, even if it's anonymous.
- delano 15y agoLet's just say we're all in agreeance.