• ImgurRefugee114@reddthat.com
    link
    fedilink
    arrow-up
    6
    ·
    5 小时前

    I’ve seen an annoying trend of places that make you enter an email first and then you press a button and then the a password field appears, and then you have to press another button to get to 2FA with a third button. Because two weren’t bad enough, I guess.

    • Dhs92@piefed.social
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 小时前

      They do this because it would be ridiculous to list every possible SSO provider, and some sites for businesses support custom SSO

    • nocturne@piefed.social
      link
      fedilink
      English
      arrow-up
      1
      ·
      4 小时前

      I just had a log in require email, then the password field vanished, it requested my 2fa, then the password field returned.

  • DaddleDew@lemmy.world
    link
    fedilink
    arrow-up
    27
    ·
    8 小时前

    How about not needing an account for things that don’t need accounts?

    I’ve just bought a Lego set for my nephew’s Christmas present and I couldn’t just check out with my credit card. No. I had to create a Lego account and join some sort of community thing with nickname, personal page and reward points systems and constant email spam. And of course two days after that I get informed that they were hacked. I can’t wait for the damn set to be delivered already so I can delete that account.

  • MonkderVierte@lemmy.zip
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    7 小时前

    Shouldn’t we reboot the internet and do it right from scratch, without compatibility to some 1980’s limitations and without executing foreign turing-complete code?

    • cadekat@pawb.social
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      4 小时前

      Dude, HTTP basic auth has existed since the dawn of the internet (or nearly so) and it’s far superior to HTML forms…

        • cadekat@pawb.social
          link
          fedilink
          arrow-up
          2
          ·
          4 小时前

          Sorry, how is an HTML form any less plaintext than HTTP basic auth?

          If you put them over TLS, they are equally secure.

          Edit: unless you meant passkeys, in which case I would agree with you.

  • cRazi_man@europe.pub
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    12 分钟前

    A bunch of things add effort but also make sense. 2FA, etc… Fine. But why the fuck do I need to look so hard to find a login button now? Don’t you want me to login?

  • cadekat@pawb.social
    link
    fedilink
    arrow-up
    2
    arrow-down
    2
    ·
    7 小时前

    Passkeys aren’t actually bad, they just make the “remember my password” flow slightly easier and more secure.