Re:Database leak exposes 3.3M Hello Kitty fans
by maaku on Tuesday December 22, 2015 @12:02PM
(#10778826)
That is a decent idea I've never heard of before. Have you tried submitting an issue to various database issue trackers?
[ Parent
| on HN ]
Re:Database leak exposes 3.3M Hello Kitty fans
by nly on Tuesday December 22, 2015 @12:24PM
(#10778978)
No, because even this would be a total cock-up. Don't give anybody your password, and just can't mess it up. So i'm not really in favour of fixing backends at all. I think the password problem is entirely the browser vendors reponsibility. Solid password authentication already exists in TLS (which you need anyway), it's just not widely implemented or exposed via browser UIs.
There are too many vested interests from the big players, where the hope is that deliberately making authentication ever more burdensome for users will just lead them to give up and select 'login with Facebook/Google/Live' and hand them the keys to the kingdom.