This is really scary.

This is really scary. It could have totally happened to me too. How can we design security which works even when people are tired or stressed? Once upon a time, I used a software called passwordmaker. Essentially, it computed a password like hash(domain+username+master password). Genius idea, but it was a nightmare to use. Why? Because amazon.se and amazon.com share the same username/password database. Similarly, the "domain" for Amazon's app was "com.amazon.something". Perhaps it's time for browser vendors to strongly bind credentials to the domain, the whole domain and nothing but the domain, so help me Codd.

Comments (0)

No comments yet. Start the discussion.

This is really scary.

Tags

Related issues

That's the biggest problem with iOS because Apple can be ordered to block them from the App Store and it would be instantly kill these pr...

I'm intrigued about the "Trip Planner" being a top-level app.

This asymmetry is IMO the biggest problem with AI-driven output.

This is one of the most important objectives in software today.

At least in Europe - these rouge corporations need to be reined in or just leave the market.

I was skeptical, but this looks genuinely useful.

Why has she gone through so many iPhones?

The biggest problem with Europe is the lack of innovation.

This is really scary.

Comments (0)