4 ms·

Could you explain what is wrong in the Stack Exchange answer ?

• pbiggar 14y ago
  Sure. Lets ignore that this was for a 2-10 person device as asked in the question, as I think most of the answerers also ignored this. Suppose your credentials are USERNAME and PASSWORD. What is the security difference between this, and having a single credential, which is USERNAMEPASSWORD? If USERNAME is known, none. (There are of course UX things, like sending password reminders, but interestingly enough, the answers were nearly all about security, not UX).
  • aaron695 14y ago
    I'd agree. None of the answer seem close to correct. It is an interesting idea. I had a small site without compulsory passwords just email address. Idea being you'd suck more users in this way (Data was not a real security issue) And emails are unique. Let the user add a password if they want. It never got popular, so no idea how it would go. Griefing might be an issue. But back to the point, it's a risk management issue. What's the return on no passwords and what's the risk. Flatmates can rob my room if they are evil. So I don't consider a small security issues on password overlaps a problem. Really Microsoft considers a computer compromised once the attacker has physical access anyway. I do however want a small barrier to them reading my emails etc. (Something about temptation) Perhaps there's issues with teaching bad habits (UX), perhaps it'd confuse users(UX). Perhaps like all projects it goes from 2-10 users to hundreds. This is more what should be discussed.