4 ms·

> Before this new wave of SMS trash My favorite is it's often paired with "passwordless" trash lol. Why can't I just give my whole fucking credential out in 1

by WWLink 3y ago

> Before this new wave of SMS trash My favorite is it's often paired with "passwordless" trash lol. Why can't I just give my whole fucking credential out in 1 action. What's this nonsense where I have to enter my username, THEN wait for the page to load, THEN click "send verification email" or "send code", then half the time they want to SMS me and have me enter another code lmao.

iacvlvs 3y ago
I use 1password with Fastmail integration to create unique email addresses for each login. This new “sipping from thimbles” approach to authentication breaks that because iOS and/or 1pass don’t recognise it as a login until the password screen, so I’m swapping and searching and copying and pasting just to log in. I viscerally hate that sort of user hostile design of the auth/login.
EVa5I7bHFq9mnYK 3y ago
And don't forget to solve 10-stage captcha before eveey page load!
- WWLink 3y ago
  My favorite is when you try to sign in, but it fails because you didn't answer the captcha on the login screen... because the captcha never loaded.
burnerthrow008 3y ago
> What's this nonsense where I have to enter my username, THEN wait for the page to load, THEN click "send verification email" I can’t speak to all of them, but many sites that require (only) a username first have enterprise SSO integrations. The enterprise buying the service (understandably) doesn’t want its employees to type in both username and password on a 3rd party site, especially since the SSO process will handle auth after the username is entered. I know of one site with both username and password on the first page, and has enterprise SSO. Login will automatically fail if you enter anything in the password field when logging in with an SSO-enabled username. But that doesn’t stop copy-pasted credentials from being transmitted to their server, which is something enterprise customers want to avoid

by WWLink 3y ago

iacvlvs 3y ago

I use 1password with Fastmail integration to create unique email addresses for each login. This new “sipping from thimbles” approach to authentication breaks that because iOS and/or 1pass don’t recognise it as a login until the password screen, so I’m swapping and searching and copying and pasting just to log in. I viscerally hate that sort of user hostile design of the auth/login.

EVa5I7bHFq9mnYK 3y ago

And don't forget to solve 10-stage captcha before eveey page load!

WWLink 3y ago
My favorite is when you try to sign in, but it fails because you didn't answer the captcha on the login screen... because the captcha never loaded.

burnerthrow008 3y ago

> What's this nonsense where I have to enter my username, THEN wait for the page to load, THEN click "send verification email" I can’t speak to all of them, but many sites that require (only) a username first have enterprise SSO integrations. The enterprise buying the service (understandably) doesn’t want its employees to type in both username and password on a 3rd party site, especially since the SSO process will handle auth after the username is entered. I know of one site with both username and password on the first page, and has enterprise SSO. Login will automatically fail if you enter anything in the password field when logging in with an SSO-enabled username. But that doesn’t stop copy-pasted credentials from being transmitted to their server, which is something enterprise customers want to avoid