4 ms·
The idea of rewarding customers who behave in a responsible way is very interesting. I'm tempted to see if we can offer discounts to users who use a password wi
by dave1010uk 14y ago
The idea of rewarding customers who behave in a responsible way is very interesting. I'm tempted to see if we can offer discounts to users who use a password with high entropy. Do any other SaaS or ecommerce sites do anything like this? I recall one site adding an "IE tax" (rather than offering a Firefox / Chrome discount). Trying to think if there's any other metrics that could be used to apply discounts.
- MichaelApproved 14y agoHow important is a high entropy password for web services that properly encode passwords and limit brute force attempts? It's my understanding that the biggest issue is stolen passwords or captured login cookies that cause the most problems. I'm genuinely curious to hear the argument.
- tnorthcutt 14y agoIt's probably fairly common that $high_entropy_password != $password_used_elsewhere. In other words, if a user uses a high entropy password, there's a better chance that they're not reusing it elsewhere, thus improving security.
- MichaelApproved 14y agoNot that common for me. I know several users who have 1 simple & 1 complicated password that's used depending on the site's requirements. Those two password are used repeatedly.
- zxtang 14y agoIt was specifically an IE7 tax by a company called Kogan: http://www.kogan.com/au/blog/new-internet-explorer-7-tax/ http://www.kogan.com/au/blog/new-internet-explorer-7-tax/. And here's the HN discussion: https://news.ycombinator.com/item?id=4109137 https://news.ycombinator.com/item?id=4109137