News for hackers. Stuff that matters.

A comment on Ebay posts every character a user types into the password box. Parent comment

Re:Ebay posts every character a user types into the password... by TorKlingberg on Wednesday June 29, 2016 @10:32AM (#12001848)
You can do a lot of server round trips before you reach 400 kB.
[ Parent | on HN ]
Re:Ebay posts every character a user types into the password... by tnorthcutt on Wednesday June 29, 2016 @12:53PM (#12002902)
What's better: A) compromising security but using less bandwidth, or B) using more bandwidth, but staying secure?

Besides, the password strength js can easily be loaded async.

[ Parent | on HN ]
Re:Ebay posts every character a user types into the password... by majewsky on Wednesday June 29, 2016 @11:18AM (#12002153)
Yes, but these 400 kB won't contain any personal data.
[ Parent | on HN ]