The “Cobra Effect” that is disabling paste on password fields

Re:The “Cobra Effect” that is disabling paste on password fi... by oneeyedpigeon on Sunday June 26, 2016 @07:29PM (#11983340)

I'm intrigued as to how you 'pronounced' that. Did you say "open parens" and "caret", and did they understand what you meant? Also, is having to divulge your password really the best way of verifying your account? Do they advise you to change your password immediately after going through this rigmarole?

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by banana_giraffe on Sunday June 26, 2016 @07:46PM (#11983409)

I would have rattled off something like "oh open paren sea cap why colon caret you equals" and so on. Honestly I have no idea if they parsed the sentence, or decided "gibberish from phone equals gibberish on screen .. good enough"

They didn't advise me to change my security question, no doubt because the name of my favorite childhood pet isn't likely to change.

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by Vexs on Monday June 27, 2016 @10:26AM (#11986322)

Huh, never thought about it, but that's a pretty good argument against random security questions.

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by simbalion on Friday July 01, 2016 @04:21AM (#12014589)

Another good argument is: having 5 passwords is not more secure than 1 really strong password.

I also think 2fa is ridiculous for 99% of applications. The widespread adoption we've seen is largely the result of developers trying to solve for user error, which as I stated in a previous comment is a waste of time and can never succeed (unless your goal is to find the flaws in your system).

[ Parent | on HN ]