this post was submitted on 30 Sep 2023
155 points (73.7% liked)

Programming

17669 readers
220 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]



founded 2 years ago
MODERATORS
 

This thread is frustrating. Everyone seems more interested in nitpicking the specifics of what OP is saying and are ignoring that a forum sends you your password (not an automatically generated one) in an email on registration.

you are viewing a single comment's thread
view the rest of the comments
[–] JackbyDev -2 points 1 year ago (1 children)

It's criticism directed at a service provider, not users. Service providers should assume users reuse passwords. Security is about protecting everyone.

[–] [email protected] 1 points 1 year ago (1 children)

Than direct it at the service provider? Oh wait it got fixed a while ago.

Also where does their liability stop? Should they also just assume everyone is compromised? Where does the users onus come into play? I guess they shouldn’t send password resets than, since they should assume that their email is compromised already….

Yeah that’s actually a terrible idea if they must assume that they must protect everyone. Sorry can’t reset your password your email must be compromised.

[–] JackbyDev 1 points 1 year ago (1 children)

This is slippery slope bullshit and you know it. I'm not saying providers should have to magically prevent anything. I'm only saying they shouldn't send you your password in an email. Crazy take, I know.

Also, with regards to it already being fixed or not, when I made this thread I hadn't seen anything about that in the other thread. I'm more just annoyed that people want to dunk on people with supposed gotchas while acting like sending a password in an email is okay somehow.

[–] [email protected] 0 points 1 year ago* (last edited 1 year ago)

No it’s not slippery slope in this case, it’s what you’re suggesting and why it’s utter bullshit. But yes of course that’s the obvious defense to take there.

You’re not only saying that, you said that they need account for everything. Two totally different things. Can’t have X and not have Y.

Sending a password is okay in quite a few scenarios, you’re talking to broad again her. Also, maybe make sure you know the story before jumping on as well…? You’re making the issues worse not better.